A $388 Million Exchange Breach, and Seven of Eight Majors Closed Green

Bitget suspended customer withdrawals after attackers drained its wallets, and the market responded by bidding up the assets that were stolen. Reuters put the initial loss near $351.6 million; Bitget subsequently clarified that roughly $388 million in assets were affected once holdings routed through Zcash and TRON were analyzed. Preliminary evidence cited by the company points to North Korean actors, which would make this the largest theft of 2026.

The breach occurred at the custody layer. Nothing in it touched consensus, block production, or settlement finality on any chain involved, and Friday's pricing respected that distinction almost immediately.

The Divergence

Seven of the eight majors closed higher. SOL/USD gained 4.48% to $122.28 and ADA/USD matched that percentage to close at $0.2588 — both finishing at the very top of their 90-day closing ranges, and both settling in the upper third of the session's own range. XRP/USD, identified as the largest single asset drained in the breach at roughly $157 million, rose 2.37% to $1.5711.

XRP traded as high as $1.6300 intraday — 3.7% above where it closed — on the same day it was named the most heavily drained asset in the year's biggest exchange theft.

The lone decliner was BTC/USD, down 0.37% to $84,096.01 and now sitting on four consecutive red closes, 2.6% below its 90-day closing high of $86,352.01. Bitcoin's weakness has its own drivers and predates Thursday's disclosure; grouping it with the hack would be a mistake.

Why They Diverged

The most consequential development of the day was not the theft but the response to it: Circle and Tether moved to freeze the attacker's wallets. That capability is a contract-level primitive, written into the token standards themselves, and it substantially reduces the probability that stolen value becomes forced selling. An attacker holding frozen balances is not a seller.

The attacker's routing tells you where the friction is. Moving assets across Zcash's shielded pool and TRON's low-fee throughput is the behavior of someone working around issuer controls rather than through them. Meanwhile, the XRP Ledger's own settlement continued uninterrupted — the failure was a custodian's key management, and the ledger's participants appear to have read it that way.

Against that, the policy layer moved in the other direction. Hester Peirce, the SEC's most consistent crypto advocate, is departing next week, and the Blockchain Association lost senior leadership shortly after the CLARITY Act failed to advance. Enforcement capability is migrating into the protocols faster than it is arriving from Washington.

Which Ecosystem Is Compounding

The obvious answer is Solana, and it is partly priced: a new 90-day closing high and a 20.0% gain over thirty sessions leave little room for surprise. Cardano quietly outpaced it over the same window at 21.6%, and Avalanche has compounded 42.4% across thirty sessions even after giving back 5.7% over the last five.

The less obvious beneficiary is the stablecoin issuance layer. Circle and Tether have now demonstrated, in public and at scale, that they function as the industry's de facto clawback mechanism. That capability accrues to the chains where their tokens dominate settlement, and it strengthens the case institutional custodians have been making internally: issuer-controlled assets carry a recoverability profile that bearer assets do not. For a bank deciding which rail to run dollar settlement across, that is worth more than throughput.

Still holding the view from Thursday's note on stablecoin rail economics: XRP needs a close above $1.5779 to clear its 90-day high, and Friday's session came within 0.4% of it.

The Cycle Position

Exchange custody is roughly where payment processing was before card networks standardized liability. The industry absorbed a nine-figure loss without a solvency event and without protocol-level contagion, which is evidence of maturation — but a fourth such event in a year would be evidence of something else. Over the next two to three quarters, the question is whether proof-of-reserve tooling and third-party custody become procurement requirements rather than marketing claims.

Solana confirms leadership if it closes above $124.00 within ten sessions; failing that, Friday's high looks like a rotation spike rather than a new range. The argument is most directly tested there. What would change the view: a close in BTC/USD below Friday's low of $83,183.00 within five sessions would reframe this as broad risk reduction with bitcoin leading, in which case the altcoin strength is noise rather than rotation. A second custodial failure inside thirty days would matter more than either level.

The enforcement primitives are being built into the assets themselves, and that is the layer worth watching through the next two quarters.