SlowMist (Organization): news timeline & CVEs

Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million

Bitget says suspected North Korea-linked hackers stole $351.6 million from hot and warm wallets.

Cryptocurrency exchange Bitget said suspected North Korea-linked attackers stole $351.6 million on September 24, 2026, from a limited set of hot and warm wallets holding ETH, XRP, BNB, AVAX, USDT, and USDC. The company said the attacker compromised a backend wallet system, spoofed transaction data, and bypassed authorization. Withdrawals were suspended while deposits and trading continued. Mandiant and SlowMist are investigating; Bitget said user balances, cold wallets, and the separate self-custodial Bitget Wallet were unaffected and that its User Protection Fund covers the loss. CEO Gracy Chen said some blockchain foundations froze suspected hacker addresses.

Security AffairsSep 25, 18:02 UTC · 1d agoData breach in the wild 9 sources

Bitget blames North Korea for $387.5M crypto wallet raid

Bitget says North Korean hackers stole about $387.5 million via its wallet backend.

Bitget CEO Gracy Chen said attackers stole about $387.5 million in digital assets after first estimating $351.6 million, adding later-identified Zcash and TRON losses. Arkham reported roughly $350 million taken, including about $228 million in 18 minutes, with $153 million of XRP, $66.2 million of ETH, $34.8 million of USDT, $12.9 million of USDC, and $12.8 million of Tether Gold among the assets. Chen said hackers breached the wallet-service backend, forged transfer data, and invoked authorization signing, while ruling out private-key leakage; cold wallets and customer balances were unaffected and withdrawals were paused. IP patterns and on-chain signatures are being linked to North Korea. Mandiant and SlowMist are investigating, and Bitget set aside 5% of the stolen amount as a recovery bounty.

The Register · Securityupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 17:04 UTC · 1d agoData breach in the wild 9 sources

Crypto CEO accuses North Korea of stealing $387 million from Bitget platform

Bitget says hackers stole $387.5 million and its CEO links the theft to North Korean groups.

Singapore-based exchange Bitget said attackers stole about $387.5 million in ETH, XRP, USDC and other coins after breaching a backend wallet system. CEO Gracy Chen said IP addresses, behavior and on-chain signatures point to North Korean-linked hackers, and analysts tied flows to Lazarus Group. Withdrawals are suspended while Mandiant and SlowMist assist, and a user-protection fund above $464 million is expected to cover losses. Bitget is offering 5% bounties for freezing or recovering attacker funds, and some platforms have already frozen related wallets.

The Recordupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 15:15 UTC · 1d agoData breach in the wild 9 sources

North Korea Suspected in $351 Million Bitget Crypto Heist

Bitget says attackers stole about $351.6 million from hot wallets using methods resembling North Korean hackers.

Bitget said attackers stole roughly $351.6 million in ETH, XRP, BNB, AVAX, USDT and USDC from a small number of hot wallets on September 24. Cold wallets and the separately hosted Bitget Wallet were untouched, and the company says private keys were not compromised. CEO Gracy Chen said IP behavior and on-chain patterns closely match known North Korean hacker methods, but named no specific group. How entry occurred is still unknown: a critical backend wallet system was abused to approve fraudulent transfers, and Mandiant and SlowMist are investigating.

SecurityWeekupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 14:16 UTC · 1d agoData breach in the wild 9 sources

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise

Bitget says suspected North Korean hackers stole $351.6 million from hot and warm wallets after a backend compromise.

Cryptocurrency exchange Bitget said suspected North Korean hackers stole $351.6 million from a limited set of hot and warm wallets on September 24, 2026. The attackers compromised a critical backend system in the wallet infrastructure, spoofed transaction data, and triggered Bitget's authorization process to move funds. Impacted assets include ETH, XRP, BNB, AVAX, USDT, and USDC on Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. Cold wallets, customer balances, and the separate self-custodial Bitget Wallet were unaffected; withdrawals were paused while Mandiant and SlowMist investigate.

The Hacker Newsupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 10:35 UTC · 1d agoData breach in the wild 9 sources4

Hackers steal $351.6 million in Bitget crypto exchange hack

Suspected North Korean hackers stole $351.6 million from Bitget hot and warm wallets.

Cryptocurrency exchange Bitget said suspected North Korean hackers stole about $351.6 million from hot and warm wallets after compromising a backend wallet system, spoofing transaction data, and triggering authorization signing. Affected networks included Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base, with assets including ETH, XRP, BNB, AVAX, USDT, and USDC. Cold wallets and the separate self-custodial Bitget Wallet were unaffected, withdrawals were suspended, and Bitget said its User Protection Fund, holding 5,500 BTC worth about $464 million, will cover losses. Mandiant and SlowMist are assisting, and some hacker wallet addresses have been frozen.

BleepingComputerupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 08:33 UTC · 2d agoData breach in the wild 9 sources

SlowMist

Timeline6 articles

Appears with