Attackers breached what Bitget described as a critical backend system in its wallet infrastructure, spoofed transaction data and transferred more than $350 million from hot and warm wallets. XRP was the largest identified component, with onchain trackers counting 102.93 million XRP worth $157.48 million; the XRP Ledger shows a total of 102,976,680 XRP, alongside 31,890 ETH and roughly $75 million in stablecoins. The stolen XRP was divided among five wallets, while tiny follow-up payments from unrelated addresses matched an address-poisoning pattern. Bitget CEO Gracy Chen said some foundations had already frozen hacker addresses, but XRP cannot be frozen because the ledger’s freeze tools apply only to issued tokens. Chen said the activity was consistent with techniques used by DPRK-linked hacker groups, while stressing that the attacker’s identity remains unconfirmed. Analysts have linked the movement to the Trader Traitor cluster, though the evidence is limited. Bitget said its User Protection Fund, holding 5,500 BTC, will cover the loss after assessment.