Rain disclosed and contained a cryptocurrency exchange security incident after reporting indicated the Bahrain-headquartered platform lost crypto assets in a confirmed exploit, while Rain stated customer fiat and crypto assets remained fully accounted for and held one-to-one under custody. Linked legal and policy evidence connects the case to cryptocurrency-enabled cybercrime tracing and broader DPRK-linked virtual-asset theft concerns, with existing incident attribution preserved as APT38.