According to CoinMeta, on September 24th, Bitget noticed unauthorized fund transfers from multiple hot wallets, and it is preliminarily determined that this attack "is very likely" related to North Korean hackers. The team identified some IP addresses, and the usage patterns of their VPN coincide with previous activities of a certain DPRK affiliated organization. Chen also stated that the attackers did not obtain the private keys of the Bitget hot wallets, warm wallets, or cold wallets; instead, they breached the exchange's internal system and directly transferred funds from within it. Bitget previously mentioned that its user protection fund has exceeded $464 million, which is sufficient to cover the losses incurred this time.