Chainalysis Ties $387M Bitget Hack to North Korea as Cross-Chain Bridges Replace Exchanges for Money Laundering
Chainalysis confirmed North Korean hackers stole $387 million from Bitget, pushing total state-sponsored crypto theft above $1 billion this year. Instead of routing funds through centralized exchanges, the attackers laundered stolen XRP and Ether directly into Bitcoin using cross-chain liquidity protocols. This structural shift highlights how non-custodial bridges have become the primary vectors for illicit capital flow.
North Korea's state-backed hacking apparatus has officially pushed past $1 billion in stolen crypto this year, capped by a massive $387 million breach of Bitget. Chainalysis tracing reveals that attackers scattered funds across four blockchains within hours of the breach, with Ethereum taking roughly half the initial outflows and the XRP Ledger absorbing over forty percent.
The critical tactical shift lies in how the stolen assets were converted without touching traditional centralized order books. Attackers deposited stolen XRP into non-custodial cross-chain liquidity protocols, drawing out Bitcoin on the receiving end over a thirty-six-hour window to bypass conventional compliance filters.
This evasion strategy shifts systematic compliance pressure directly onto decentralized liquidity providers and cross-chain bridges. With state-sponsored entities exploiting decentralized routing to offload high-risk tokens into clean Bitcoin, regulators are likely to focus tighter capital controls on non-custodial bridge infrastructure.