Bitget Hit with 2026's Largest Crypto Theft and North Korea Could Be Behind It

A massive $387.5 million breach at Bitget has just set the record for the biggest crypto theft of the year. The scale of the attack immediately put the whole tech industry on high alert, especially as early evidence ties the entire operation straight back to state-sponsored hackers in North Korea.

Bitget CEO Gracy Chen went live on X to break down what happened. He noted that security teams traced the breach to IP addresses and VPNs previously linked to Pyongyang’s cyber units. Data from TRM Labs shows that North Korean groups are now responsible for nearly three-quarters of all stolen crypto in 2026 (via TechCrunch).

How the hackers tricked the exchange into approving the thef

The way the attackers pulled this off is what makes the case so unusual. They didn’t bother trying to steal private keys or force their way into offline cold wallets. Instead, they compromised a backend software system, fed fake transfer data into the platform, and tricked Bitget’s own automated authorization checks into signing off on the withdrawals.

Once the system gave the green light, 19 separate transactions drained funds across Ethereum, XRP Ledger, Avalanche, BNB Chain, Arbitrum, TRON, and Zcash. Security teams at Bubblemaps and MistTrack watched the attackers quickly swap stolen assets into Ether—even dropping $19.67 million in USDT0 at 5% over market price just to trade fast—before routing everything through Tornado Cash and THORChain.