Elliptic assesses the theft of more than $350 million from Bitget as highly likely to be DPRK-linked, pushing its tracked total of North Korean cryptocurrency theft in 2026 above $1 billion. Attackers reportedly compromised a backend wallet-infrastructure component and spoofed transaction data rather than stealing private keys. The attribution rests on laundering-infrastructure overlap with previous DPRK-attributed exploits, consistent off-chain indicators, rapid conversion into native assets, and Bitget's assessment that a North Korean group was likely responsible. Elliptic described it as potentially the largest single DPRK-linked cryptocurrency theft of 2026.