Chainalysis: $387 million stolen from Bitget was transferred across four chains within three hours, nearly half of which went to Ethereum

Wu said he learned that Chainalysis released progress on its investigation into Bitget's $387 million security incident, saying it attributed the attack to North Korea-related threat actors. In the first three hours after the attack, stolen funds flowed through 23 transactions to Ethereum, XRP, Zcash and Tron, accounting for 49.7%, 40.8%, 7.6% and 1.8% respectively. Chainalysis stated that the investigation team used internal AI to build an automated cross-chain tracking tool, compressing more than 20 hours of manual bridging reconciliation work to less than 10 minutes, and continuously tracking stolen funds and marking associated addresses. The incident brings the total number of North Korea-related crypto thefts in 2026 to more than $1 billion, the company said.