Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Bitget confirms North Korean-linked attackers stole $387.5M via a zero-day in third-party security appliances, deploying web shells and a custom withdrawal tool.
90
- Mentions · 7d0
- Mentions · 30d0
- All mentions16
- First seenSep 25, 2026
- Last mentionedOct 1, 2026
Timeline
16 articles · newest firstBitget hacked via zero-day in third-party security products
Bitget confirms attackers stole $387.5 million using zero-days in two third-party security appliances, deploying web shells and a custom withdrawal tool against hot wallets.
86
Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M
Bitget says attackers exploited a zero-day in an unnamed third-party security product to steal $388 million from hot and warm wallets.
91
Bitget Restarts Bitcoin Withdrawals Following $387.5m Wallet Breach
Bitget resumed Bitcoin withdrawals after a third-party security product flaw let attackers steal $387.5M in unauthorized transfers from hot/warm wallets.
85
Bitget Backend Breach Drains $387.5 Million as DPRK-Linked Launderers Expose Themselves
Attackers compromised Bitget's backend wallet infrastructure on September 24, stealing $387.5 million; ZachXBT exposed DPRK-linked launderers seeking swap help in public chats.
95
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
Weekly recap led by actively exploited Citrix NetScaler ADC/Gateway flaws CVE-2026-88771 and CVE-2026-88772, plus the $387M Bitget hack and EvilTokens takedown.
82
28th September – Threat Intelligence Report
Check Point's weekly report covers ShinyHunters' FBI jobs-site breach, Bitget's $351.6M wallet theft, and actively exploited critical RCEs in Check Point and F5 products.
80
Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist
Bitget resumed Bitcoin withdrawals after a suspected North Korean theft of $387.5 million.
90
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
Bitget says suspected North Korea-linked hackers stole $351.6 million from hot and warm wallets.
87
Bitget blames North Korea for $387.5M crypto wallet raid
Bitget says North Korean hackers stole about $387.5 million via its wallet backend.
88
Crypto CEO accuses North Korea of stealing $387 million from Bitget platform
Bitget says hackers stole $387.5 million and its CEO links the theft to North Korean groups.
83
North Korea Suspected in $351 Million Bitget Crypto Heist
Bitget says attackers stole about $351.6 million from hot wallets using methods resembling North Korean hackers.
85
North Korean hackers suspected in $351M crypto theft, the largest so far this year
Suspected North Korean hackers stole about $351 million in crypto from Bitget hot wallets.
88
Hackers steal $351.6 million in Bitget crypto exchange hack
Suspected North Korean hackers stole $351.6 million from Bitget hot and warm wallets.
87
Bitget Confirms $351.6 Million Hot Wallet Hack, Suspends Withdrawals
Bitget confirmed unauthorized hot-wallet transfers totaling about $351.6 million and suspended withdrawals.
86
Bitget Hot Wallet Hacked – Attackers Stole $351.6 Million From Hot Wallets
Bitget confirmed a $351.6 million theft from hot and warm wallets while cold storage stayed secure.
90
Related CVEs
by mentions- CVE-2026-8510254%9.8Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
- CVE-2026-9361692%9.8Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-8877277%9.5Unauthenticated RCE/DoS in Citrix NetScaler ADC and Gateway
- CVE-2026-9412727%9.3Unauthenticated Heap-Overflow RCE in F5 BIG-IP APM with OAuth Profile
- CVE-2026-8790296%8.1Unauthenticated Local File Inclusion to RCE in WordPress Core (fixed in 7.1.2)
Appears with
- SlowMistorganization · 10
- Mandiantorganization · 10
- Bitgetvictim · 9
- Bitget Walletproduct · 4
- TRM Labsorganization · 3
- Gracy Chenorganization · 3
- Lazarus Groupthreat actor · 2
- Bitgetvendor · 2
- OpenAIorganization · 2
- Ellipticorganization · 2
- North Korean threat actorsthreat actor · 2
- FBIorganization · 1
- North Koreathreat actor · 1
- WordPressorganization · 1
- MEXCorganization · 1
- Binanceorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.