Bitget detected unauthorized transfers from some hot wallets on September 24 at 18:31 UTC. A day later, the estimated value of the stolen assets was revised up to $387.5 million. CEO Chen Jiaqi attributed the incident to North Korean hackers. Withdrawals remain suspended, but deposits and trading are functioning as usual. Exchanges like Binance and Bybit have supported freezing and tracking the stolen funds. The upward revision comes from on-chain tracking that accounted for initially overlooked Zcash and TRON assets. Bitget stated that no new unauthorized transactions have occurred, and forensic investigations with Mandiant and SlowMist are still ongoing.