Bitget disclosed the scope of a security incident about 12 hours after the attack, naming Ethereum (ETH), XRP, BNB, Avalanche (AVAX), Tether (USDT) and USD Coin (USDC) among the affected assets. The impacted networks included Ethereum, the XRP Ledger (XRPL), Arbitrum, Avalanche, Optimism, BNB Smart Chain and Base. Bitget said its cold wallets (offline crypto storage) across all blockchains were safe, while its separate non-custodial wallet (user-controlled crypto storage) Bitget Wallet was also unaffected. XRPL suffered the largest losses on an individual-chain basis, and some blockchain foundations froze wallet addresses linked to the hacker. Chief Executive Officer Gracy Chen said internet-address activity and on-chain analysis indicated similarities to methods previously used by North Korean hacking groups. Bitget reported the incident to relevant authorities and is cooperating with a global investigation. Withdrawals will resume after safety checks, but the exchange has not set a full restoration timeline and will publish a reopening schedule once finalized.