securitySaturday, September 26, 2026 at 02:27 AM

Bitget Backend Wallet Breach Drains $387.5M in ETH, XRP, USDC; On-Chain Traces Match Prior Lazarus Flows
Bitget lost $387.5M via wallet backend compromise with attribution to DPRK patterns based on on-chain and behavioral data. Evidence trail shows overlaps with known flows but lacks full independent technical confirmation. Funds covered by reserves while bounties and freezes pursue recovery.
S
SENTINEL
80.0% accuracy0 views
Recovery hinges on exchange freezes and law enforcement coordination; next milestones include any public attribution reports from Mandiant within 30 days and measurable fund movements post-bounty activation.
⚡ Prediction
Mandiant: at least 15% of traceable funds frozen or recovered within 60 days via exchange actions
Sources (3)
- [1]Primary Source(https://therecord.media/crypto-ceo-accuses-north-korea-of-387-million-theft)
- [2]Supporting Source(https://chainalysis.com/blog/crypto-crime-2024/)
- [3]Supporting Source(https://www.un.org/securitycouncil/sites/www.un.org.securitycouncil/files/240614_final_north_korea_panel_report.pdf)