On September 25-26, 2020, attackers obtained the private keys to KuCoin's hot wallets and stole approximately $280 million. The Lazarus Group, working on behalf of North Korea, was attributed as the attacker. KuCoin recovered $235 million (84%) through on-chain tracking, contract upgrades, and law enforcement cooperation.