On September 24, 2026, Bitget identified an attack that reportedly compromised a backend wallet-infrastructure component, spoofed transaction data, and transferred approximately $387.5 million in assets across EVM networks, XRP Ledger, Zcash, and TRON to attacker-controlled addresses. Bitget said it contained the incident and remediated the vulnerability; Elliptic assessed the theft as highly likely DPRK-linked based on shared laundering infrastructure, off-chain indicators, and methods seen in prior North Korean operations.