Operatives based in China are utilizing Discord and Telegram to find support for moving stolen cryptocurrency on behalf of North Korean attackers, according to analyst ZachXBT. These actors are laundering approximately $387 million from the Bitget exchange through cross-chain bridges and mixing services such as Wasabi. One specific launderer, known as Alias 4, was previously linked to the $292 million Kelp DAO exploit earlier this year.

Bitget resumed phased withdrawals on September 28 after a four day freeze, processing 4,098 BTC requests since the restart. The exchange transferred 2,042.28 BTC, or roughly $169 million, from its 5,500 BTC Protection Fund into hot wallets to facilitate these payments. CEO Gracy Chen said the company will restore the Protection Fund above $300 million within a week and expects all other assets, including ETH and USDT, to be available by October 2.