$XRP $ETH $USDT Bitget lost about $351.6 million from hot and warm wallets on Sept. 24, the biggest exchange hack of 2026 so far.

CEO Gracy Chen says the attack matches North Korean groups such as Lazarus.

Hackers did not steal private keys; they compromised a backend system and spoofed transfer approvals.

XRP was the largest slice (~$157M), followed by ETH, USDT, and USDC across several chains.

Cold wallets stayed safe. Withdrawals are paused; trading and deposits remain open.

Bitget says its $464M+ User Protection Fund fully covers the loss.

Bitcoin barely moved and still trades near $84,000.

ETF inflows stayed positive while the market digested the news.

If attribution holds, Lazarus-linked groups have now taken well over $1.8B from two major exchanges since 2025.

The full incident report and a clear date for reopening withdrawals will decide user trust.

Hot-wallet risk is operational risk, not just key risk.

Nation-state actors still treat exchanges as funding sources.

Holding $84k after a $350M theft does not mean the problem is solved.