Bitget said attackers transferred approximately $351.6 million from parts of its hot and warm wallet infrastructure after compromising a backend wallet system on September 24. The exchange said private keys were not leaked, cold wallets across all blockchains remained secure and its separately operated non-custodial Bitget Wallet was unaffected. Lookonchain identified 102.93 million XRP worth about $157.48 million as the largest single asset, alongside ETH, stablecoins, tokenized gold, BNB, AVAX and TRX; Bitget said the XRP Ledger recorded the largest blockchain-level losses. Most EVM-chain proceeds were later reportedly converted into 67,982 ETH worth about $183 million, although earlier portfolio estimates listed 31,890 ETH and different totals. Bitget paused withdrawals pending safety checks without setting a full reopening timetable, while deposits, spot trading and derivatives trading continued. Its 5,500-BTC User Protection Fund, valued at about $464 million, would cover assessed losses. CEO Gracy Chen said internet-address activity and onchain patterns resembled known North Korea-linked methods, but no government agency had publicly attributed the breach. Some blockchain foundations froze linked addresses, while a proposed connection to the July AFX exploit and any Lazarus Group or TraderTraitor attribution remained unconfirmed.