Bitget CEO Gracy Chen said a preliminary investigation found that some IP addresses matched VPN services used by a North Korean hacking group, while the attack pattern resembled the group’s earlier operations. The company has not confirmed the attackers’ identity and does not currently believe the incident involved insiders. Attackers moved about $351.6 million by compromising platform systems, without fabricating user withdrawal requests or obtaining private keys for cold wallets (offline crypto storage) or hot wallets (internet-connected crypto storage). Bitget is continuing to investigate the affected systems and the method used to gain access.