Default
Door Remote - 25 Sep 2026
Today in crypto, Bitget raised the value of assets affected by Thursday’s security breach to $388 million, while CEO Gracy Chen said preliminary evidence points to possible North Korean involvement. Meanwhile, KelpDAO sued LayerZero and its CEO over the $292 million rsETH bridge exploit.
Bitget says $388 million affected in security breachCrypto exchange Bitget said about $388 million in assets were transferred to attacker-controlled addresses in Thursday’s security breach, roughly $35 million more than initially reported.
The exchange revised its estimate from $352 million after identifying additional affected assets on the Zcash and TRON networks. Bitget said the higher figure reflects a more complete accounting of the original incident rather than additional unauthorized transfers.
The breach involved addresses across Ethereum Virtual Machine networks, the XRP Ledger, Zcash and TRON. Affected assets included XRP, Ether (ETH), Tether’s USDt (USDT), Zcash (ZEC), USDC, USDT0, XAUt, BNB, AVAX and TRX.
Bitget said withdrawals remain paused while it continues its investigation. The exchange has also launched a bounty program aimed at helping freeze or recover stolen assets.
The incident ranks among the crypto industry’s largest security breaches, though it remains well below the roughly $1.5 billion stolen from Bybit in February 2025.
KelpDAO sues LayerZero, CEO over $292 million rsETH bridge exploitKelpDAO has filed a lawsuit against cross-chain protocol LayerZero following the roughly $292 million exploit of its rsETH bridge earlier this year, alleging that failures in LayerZero’s security infrastructure contributed to the attack.
KelpDAO said Friday that LayerZero failed to disclose risks in its technology or prevent attackers from compromising its infrastructure. It also alleged that LayerZero had reviewed and endorsed its deployment and configuration in writing before the exploit.
The lawsuit also names LayerZero co-founder and CEO Bryan Pellegrino.
“Our number one priority has always been and will remain the security of our users’ assets,” Kelp wrote. “But we also need to correct the record, and hold LayerZero and Mr. Pellegrino accountable for the harm they have caused us and the broader DeFi ecosystem.”
Pellegrino called the claim “meritless” and said he would defend the case in Vancouver.
The lawsuit escalates a months-long dispute over whether the loss was caused by the compromise of LayerZero’s infrastructure, KelpDAO’s bridge configuration, or both.
Bitget CEO suspects North Korea behind $352 million hack, citing IP cluesBitget CEO Gracy Chen said North Korean hackers may be behind the exchange’s $351.6 million security breach on Thursday, citing preliminary findings linking IP addresses to VPN services used by a North Korean group.
Speaking during a live Q&A following the incident on X, Chen said security investigators had flagged similarities with previous North Korean attacks. She said the exchange did not believe the breach was an inside job.
“We’ve identified some IP addresses that match the VPN choices by a certain DPRK group,” Chen said, referring to the Democratic People’s Republic of Korea.
North Korean hackers were linked to an estimated $2.02 billion in crypto theft in 2025, including the roughly $1.5 billion Bybit exchange hack, which the FBI attributed to North Korea.
The comments come after Bitget reported unauthorized transfers affecting portions of its hot and warm wallet infrastructure on Thursday. Withdrawals remain suspended at the time of publication.
During the Q&A, Chen also said some stolen funds had been recovered, without specifying an amount. She said the exchange was working with blockchain foundations and other partners on recovery efforts.
Bitget says $388 million affected in security breachCrypto exchange Bitget said about $388 million in assets were transferred to attacker-controlled addresses in Thursday’s security breach, roughly $35 million more than initially reported.
The exchange revised its estimate from $352 million after identifying additional affected assets on the Zcash and TRON networks. Bitget said the higher figure reflects a more complete accounting of the original incident rather than additional unauthorized transfers.
The breach involved addresses across Ethereum Virtual Machine networks, the XRP Ledger, Zcash and TRON. Affected assets included XRP, Ether (ETH), Tether’s USDt (USDT), Zcash (ZEC), USDC, USDT0, XAUt, BNB, AVAX and TRX.
Bitget said withdrawals remain paused while it continues its investigation. The exchange has also launched a bounty program aimed at helping freeze or recover stolen assets.
The incident ranks among the crypto industry’s largest security breaches, though it remains well below the roughly $1.5 billion stolen from Bybit in February 2025.
KelpDAO sues LayerZero, CEO over $292 million rsETH bridge exploitKelpDAO has filed a lawsuit against cross-chain protocol LayerZero following the roughly $292 million exploit of its rsETH bridge earlier this year, alleging that failures in LayerZero’s security infrastructure contributed to the attack.
KelpDAO said Friday that LayerZero failed to disclose risks in its technology or prevent attackers from compromising its infrastructure. It also alleged that LayerZero had reviewed and endorsed its deployment and configuration in writing before the exploit.
The lawsuit also names LayerZero co-founder and CEO Bryan Pellegrino.
“Our number one priority has always been and will remain the security of our users’ assets,” Kelp wrote. “But we also need to correct the record, and hold LayerZero and Mr. Pellegrino accountable for the harm they have caused us and the broader DeFi ecosystem.”
Pellegrino called the claim “meritless” and said he would defend the case in Vancouver.
The lawsuit escalates a months-long dispute over whether the loss was caused by the compromise of LayerZero’s infrastructure, KelpDAO’s bridge configuration, or both.
Bitget CEO suspects North Korea behind $352 million hack, citing IP cluesBitget CEO Gracy Chen said North Korean hackers may be behind the exchange’s $351.6 million security breach on Thursday, citing preliminary findings linking IP addresses to VPN services used by a North Korean group.
Speaking during a live Q&A following the incident on X, Chen said security investigators had flagged similarities with previous North Korean attacks. She said the exchange did not believe the breach was an inside job.
“We’ve identified some IP addresses that match the VPN choices by a certain DPRK group,” Chen said, referring to the Democratic People’s Republic of Korea.
North Korean hackers were linked to an estimated $2.02 billion in crypto theft in 2025, including the roughly $1.5 billion Bybit exchange hack, which the FBI attributed to North Korea.
The comments come after Bitget reported unauthorized transfers affecting portions of its hot and warm wallet infrastructure on Thursday. Withdrawals remain suspended at the time of publication.
During the Q&A, Chen also said some stolen funds had been recovered, without specifying an amount. She said the exchange was working with blockchain foundations and other partners on recovery efforts.