Summary
- DPRK-linked hackers stole $387 million from Bitget on September 24 2026 pushing their yearly total past $1 billion
- Chainalysis deployed in-house AI to trace the stolen funds across blockchain flows within hours
- NEAR Intents blocked more than $50M in cross-chain laundering of Bitget funds
North Korean hackers stole $387 million from Bitget on September 24, 2026. They hit hot wallets and claimed the largest DPRK-linked theft of the year. Chainalysis blamed state-sponsored operators within hours.
That pushed North Korea's 2026 total past $1 billion. The pattern shows bolder state-backed hits on exchanges and protocols.
Context
North Korea treats crypto theft as a core revenue stream. Earlier smaller jobs already pointed toward record proceeds this year. The Bitget incident revealed weak hot wallet controls and how fast funds cross chains.
Details
Chainalysis traced the stolen funds across chains in hours with its AI tools. The firm spotted laundering moves that matched prior DPRK activity.
NEAR Intents blocked more than $50 million in cross-chain laundering attempts. It also froze another $503,000 that reached its system.
THORChain permitted transparent swaps of the tainted assets without selective freezes. The funds stayed traceable yet kept moving.
"DPRK-attributed actors stole $387M from Bitget."
, Chainalysis
Social Highlight · @chainalysis · 2026-10-05
North Korea's 2026 crypto thefts exceeded $1B. (https://x.com/chainalysis/status/123)
Reaction
Analysts point out that protocols like THORChain favor full transparency over intervention. Exchanges and users must avoid the tainted funds on their own.
The breach has revived calls for stronger custody rules at exchanges and better detection at cross-chain platforms.
North Korea's haul now exceeds $1 billion for 2026. Observers will watch for more exploits before year end or any expanded recovery beyond the NEAR Intents blocks.