Chainalysis links $387M Bitget hack to North Korea

Bitget: Bitget is a global cryptocurrency exchange platform providing spot trading, derivatives, and related services. It was recently the target of a major security breach that investigators have linked to North Korean threat actors, leading to an internal investigation and coordinated response with analytics firms. THORChain: THORChain is a decentralized cross-chain liquidity protocol that facilitates swaps between different cryptocurrencies through its native liquidity pools. The protocol was used by the Bitget attackers to convert portions of the stolen assets into Bitcoin, highlighting its role in cross-chain asset movement during the laundering process. Chainalysis: Chainalysis is a blockchain analytics company that provides tools for tracing cryptocurrency transactions and supporting law enforcement and compliance efforts. It has played a central role in the Bitget incident by using AI-assisted methods to map the movement of stolen funds and connect them to known threat actor patterns. Threat Patterns: North Korean-linked groups have demonstrated consistent use of specific VPN services and transaction manipulation techniques in recent exchange targeting operations. Protocol Dynamics: Permissionless decentralized swap protocols have seen elevated activity when processing large volumes of assets from high-profile thefts. Investigation Methods: Blockchain analytics teams have integrated AI automation to speed up the tracing of complex cross-chain transactions in real time.