Bitget says approximately $387.5 million in digital assets was stolen in a cyberattack showing indicators associated with North Korean state-backed hackers. The exchange initially estimated the loss at $351.6 million, but increased the figure after identifying additional affected assets; customer balances and cold wallets were reportedly not affected.

Blockchain analysts said about $228 million left Bitget wallets within 18 minutes, including XRP, Ethereum, stablecoins and Tether Gold across several networks. Bitget has temporarily suspended withdrawals while Mandiant and SlowMist investigate, and says its backend wallet service was compromised to forge transfer details and authorise transactions, rather than through leaked private keys. The company says its $464 million-plus protection fund and more than $1 billion in its own assets cover customer funds on a one-to-one basis.