The Bitget hack didn’t stay on one blockchain for long. After $387 million was stolen on September 24, Chainalysis investigators used in-house AI and custom automation to track the funds across multiple networks and protocols.
The speed mattered. Investigators estimate more than 20 hours of manual bridge reconciliation was compressed into under 10 minutes. Hundreds of transfers followed the attack, with funds moving between networks including Ethereum and Bitcoin.
During the first three hours, the stolen funds left Bitget across 23 transfers and reached four chains. Ethereum accounted for 49.7%, XRP 40.8%, Zcash 7.6%, and Tron 1.8%.
From there, investigators identified several laundering mechanisms, including cross-chain liquidity protocols, messaging protocols, instant swaps and laundering services. The stolen XRP created a particularly messy trail.
Instead of sending the XRP directly to an exchange, the attackers moved it through a cross-chain liquidity protocol and received Bitcoin on another network. That sounds complicated. The blockchain record still remained.
Investigators matched deposits with corresponding payouts, connecting activity that appeared separate across different chains. Tens of millions of dollars moved through this mechanism over roughly a day and a half before reaching attacker-controlled addresses.
Chainalysis said its usage of AI didn’t replace investigators. Instead, experts defined the logic, reviewed outputs and directed the investigation while automation handled repetitive tracing work.
Within minutes of identifying the stolen funds, labels were live on its data platform for compliance teams and law enforcement partners.
The attack, attributed by Chainalysis to North Korean actors, pushed crypto stolen by such actors in 2026 past $1 billion. The Bitget hack investigation continues as teams monitor linked addresses and follow the funds across chains.
CoinPedia has been delivering accurate and timely cryptocurrency and blockchain updates since 2017. All content is created by our expert panel of analysts and journalists, following strict Editorial Guidelines based on E-E-A-T (Experience, Expertise, Authoritativeness, Trustworthiness). Every article is fact-checked against reputable sources to ensure accuracy, transparency, and reliability. Our review policy guarantees unbiased evaluations when recommending exchanges, platforms, or tools. We strive to provide timely updates about everything crypto & blockchain, right from startups to industry majors.
All opinions and insights shared represent the author's own views on current market conditions. Please do your own research before making investment decisions. Neither the writer nor the publication assumes responsibility for your financial choices.
Sponsored content and affiliate links may appear on our site. Advertisements are marked clearly, and our editorial content remains entirely independent from our ad partners.
Oil prices climbed 4% above $113 a barrel as tensions between the United States and…
Well-known blockchain investigator ZachXBT has told users of Indian crypto exchange CoinDCX to withdraw their…
Celestia (TIA) has a fresh catalyst as Fibre goes live on mainnet, marking what’s described…
Ripple, a blockchain payment solution, has partnered with Swiss-regulated payment platform Arf to bring RLUSD-powered…
Pi Network is trying to stay relevant while its PI token continues struggling near lower…
Avalanche’s AVAX price prediction is getting more interesting as on-chain data confirms a remarkable growth…
