Bitget CEO suspects North Korean hackers behind the attack, says IP clues match VPN characteristics.

BlockBeats news, September 25: In a live Q&A regarding the platform security incident, Bitget CEO Gracy Chen stated that preliminary investigations found that some relevant IP addresses match VPN services used by a certain North Korean hacker group, and the attack pattern is also similar to previous actions by North Korean hackers, so the involvement of this group in the attack involving approximately $351.6 million cannot be ruled out. However, the relevant attribution is still in the preliminary investigation stage.

Gracy Chen stated that Bitget currently does not believe this incident is an insider job. The attackers directly breached the platform's systems and transferred funds, did not forge user withdrawal requests, and did not obtain the private keys of cold wallets or hot wallets. Investigators are still confirming the specific affected systems and the attackers' method of intrusion.