Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Bitget says suspected North Korean hackers stole $351.6 million from hot and warm wallets after a backend compromise.
Cryptocurrency exchange Bitget said suspected North Korean hackers stole $351.6 million from a limited set of hot and warm wallets on September 24, 2026. The attackers compromised a critical backend system in the wallet infrastructure, spoofed transaction data, and triggered Bitget's authorization process to move funds. Impacted assets include ETH, XRP, BNB, AVAX, USDT, and USDC on Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. Cold wallets, customer balances, and the separate self-custodial Bitget Wallet were unaffected; withdrawals were paused while Mandiant and SlowMist investigate.