BasisDesk

Analysis · Security & Hacks

AI Speeds Up Tracing of $387 Million Bitget Exploit Linked to North Korea

Chainalysis deployed in-house AI to compress 20 hours of manual cross-chain tracing into under 10 minutes, following funds across seven blockchains after the massive September 24 exchange breach.

$BTC $82,992 −3.9%$ETH $2,561 −5.7%$XRP $1.43 −6.0%
October 7, 2026basisdesk.news
BasisDesk

Key point 1 of 3

01

Attackers stole $387 million from Bitget on Sept. 24, 2026, by manipulating a backend system to approve unauthorized hot and warm wallet transfers.

October 7, 2026basisdesk.news
BasisDesk

Key point 2 of 3

02

Chainalysis used in-house AI to compress over 20 hours of manual cross-chain bridge reconciliation into under 10 minutes to trace the stolen funds.

October 7, 2026basisdesk.news
BasisDesk

Key point 3 of 3

03

On-chain links to previous Bybit and AFX Bridge hacks strongly suggest the involvement of North Korean threat actors, pushing DPRK's 2026 haul past $1 billion.

October 7, 2026basisdesk.news
BasisDesk

Context

The Bitget exploit occurred on Sept. 24, 2026, targeting hot and warm wallets across seven blockchains.

October 7, 2026basisdesk.news
BasisDesk

Why it matters

Bitget users are protected by the exchange's $464 million User Protection Fund, which covers the loss.

October 7, 2026basisdesk.news
BasisDesk

What to watch

The industry is waiting for Bitget's promised final incident report to confirm the exact compromise vector, as well as Chainalysis's upcoming investigative technology showcase on…

October 7, 2026basisdesk.news
BasisDesk

Sources

Built from 4 primary sources, machine-checked before publication.

  • Chainalysis Blog
  • chainalysis.com
  • archecapital.substack.com
  • trmlabs.com
October 7, 2026basisdesk.news
BasisDesk

Keep reading

Read the full analysis

AI-generated, source-verified. Sources, citations and live prices on the article page.

October 7, 2026basisdesk.news
Read the full analysis