Bitget was compromised with losses of $387.5 million on September 24 via a chain of compromised signing authorizations—not due to a private key leak— with $185 million withdrawn in less than a minute.

Money-laundering trail

The stolen funds, including $83 million in XRP, were moved across multiple wallets; about 4 BTC were traced via Wasabi CoinJoin after being routed through THORChain, along with suspicions involving a North Korean hacker.

Industry debate

THORChain refused to block the attackers’ addresses on the grounds of decentralization, drawing a great deal of fierce criticism.