Bitget (Victim): news timeline & CVEs

Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million

Bitget says suspected North Korea-linked hackers stole $351.6 million from hot and warm wallets.

Cryptocurrency exchange Bitget said suspected North Korea-linked attackers stole $351.6 million on September 24, 2026, from a limited set of hot and warm wallets holding ETH, XRP, BNB, AVAX, USDT, and USDC. The company said the attacker compromised a backend wallet system, spoofed transaction data, and bypassed authorization. Withdrawals were suspended while deposits and trading continued. Mandiant and SlowMist are investigating; Bitget said user balances, cold wallets, and the separate self-custodial Bitget Wallet were unaffected and that its User Protection Fund covers the loss. CEO Gracy Chen said some blockchain foundations froze suspected hacker addresses.

Security AffairsSep 25, 18:02 UTC · 1d agoData breach in the wild 9 sources

Bitget blames North Korea for $387.5M crypto wallet raid

Bitget says North Korean hackers stole about $387.5 million via its wallet backend.

Bitget CEO Gracy Chen said attackers stole about $387.5 million in digital assets after first estimating $351.6 million, adding later-identified Zcash and TRON losses. Arkham reported roughly $350 million taken, including about $228 million in 18 minutes, with $153 million of XRP, $66.2 million of ETH, $34.8 million of USDT, $12.9 million of USDC, and $12.8 million of Tether Gold among the assets. Chen said hackers breached the wallet-service backend, forged transfer data, and invoked authorization signing, while ruling out private-key leakage; cold wallets and customer balances were unaffected and withdrawals were paused. IP patterns and on-chain signatures are being linked to North Korea. Mandiant and SlowMist are investigating, and Bitget set aside 5% of the stolen amount as a recovery bounty.

The Register · Securityupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 17:04 UTC · 1d agoData breach in the wild 9 sources

Crypto CEO accuses North Korea of stealing $387 million from Bitget platform

Bitget says hackers stole $387.5 million and its CEO links the theft to North Korean groups.

Singapore-based exchange Bitget said attackers stole about $387.5 million in ETH, XRP, USDC and other coins after breaching a backend wallet system. CEO Gracy Chen said IP addresses, behavior and on-chain signatures point to North Korean-linked hackers, and analysts tied flows to Lazarus Group. Withdrawals are suspended while Mandiant and SlowMist assist, and a user-protection fund above $464 million is expected to cover losses. Bitget is offering 5% bounties for freezing or recovering attacker funds, and some platforms have already frozen related wallets.

The Recordupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 15:15 UTC · 1d agoData breach in the wild 9 sources

North Korea Suspected in $351 Million Bitget Crypto Heist

Bitget says attackers stole about $351.6 million from hot wallets using methods resembling North Korean hackers.

Bitget said attackers stole roughly $351.6 million in ETH, XRP, BNB, AVAX, USDT and USDC from a small number of hot wallets on September 24. Cold wallets and the separately hosted Bitget Wallet were untouched, and the company says private keys were not compromised. CEO Gracy Chen said IP behavior and on-chain patterns closely match known North Korean hacker methods, but named no specific group. How entry occurred is still unknown: a critical backend wallet system was abused to approve fraudulent transfers, and Mandiant and SlowMist are investigating.

SecurityWeekupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 14:16 UTC · 1d agoData breach in the wild 9 sources

North Korean hackers suspected in $351M crypto theft, the largest so far this year

Suspected North Korean hackers stole about $351 million in crypto from Bitget hot wallets.

Cryptocurrency exchange Bitget said attackers made unauthorized transfers from its internet-connected hot wallets on Thursday, stealing more than $351 million. CEO Gracy Chen said the heist was highly consistent with known North Korean hacker patterns. Bitget suspended crypto withdrawals and said its $464 million user protection fund should cover the loss. TRM Labs attributes about three-quarters of 2026 crypto thefts to North Korea; this is the largest known digital-currency heist of the year, above a $340 million September hack.

TechCrunch · Securityupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 13:24 UTC · 1d agoData breach in the wild 9 sources

Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise

Bitget says suspected North Korean hackers stole $351.6 million from hot and warm wallets after a backend compromise.

Cryptocurrency exchange Bitget said suspected North Korean hackers stole $351.6 million from a limited set of hot and warm wallets on September 24, 2026. The attackers compromised a critical backend system in the wallet infrastructure, spoofed transaction data, and triggered Bitget's authorization process to move funds. Impacted assets include ETH, XRP, BNB, AVAX, USDT, and USDC on Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. Cold wallets, customer balances, and the separate self-custodial Bitget Wallet were unaffected; withdrawals were paused while Mandiant and SlowMist investigate.

The Hacker Newsupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 10:35 UTC · 1d agoData breach in the wild 9 sources4

Hackers steal $351.6 million in Bitget crypto exchange hack

Suspected North Korean hackers stole $351.6 million from Bitget hot and warm wallets.

Cryptocurrency exchange Bitget said suspected North Korean hackers stole about $351.6 million from hot and warm wallets after compromising a backend wallet system, spoofing transaction data, and triggering authorization signing. Affected networks included Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base, with assets including ETH, XRP, BNB, AVAX, USDT, and USDC. Cold wallets and the separate self-custodial Bitget Wallet were unaffected, withdrawals were suspended, and Bitget said its User Protection Fund, holding 5,500 BTC worth about $464 million, will cover losses. Mandiant and SlowMist are assisting, and some hacker wallet addresses have been frozen.

BleepingComputerupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 08:33 UTC · 2d agoData breach in the wild 9 sources

Bitget Confirms $351.6 Million Hot Wallet Hack, Suspends Withdrawals

Bitget confirmed unauthorized hot-wallet transfers totaling about $351.6 million and suspended withdrawals.

Crypto exchange Bitget confirmed unauthorized transfers from part of its hot and warm wallet infrastructure, with estimated losses of about $351.6 million, detected at 18:31 UTC on September 24, 2026. Cold wallets were not affected. Bitget paused withdrawals while keeping deposits and trading online, notified law enforcement, and said its User Protection Fund of more than $464 million will cover the loss. CEO Gracy Chen promised a full incident report within 24 hours; the intrusion method and asset breakdown were not disclosed.

GBHackersupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 06:02 UTC · 2d agoData breach in the wild 9 sources

Bitget Hot Wallet Hacked – Attackers Stole $351.6 Million From Hot Wallets

Bitget confirmed a $351.6 million theft from hot and warm wallets while cold storage stayed secure.

Cryptocurrency exchange Bitget confirmed unauthorized transfers of about $351.6 million from parts of its hot and warm wallets, detected at 18:31 UTC on September 24, 2026. Offline cold wallets were unaffected, customer balances still reflect holdings, and withdrawals were paused while deposits and trading continued. On-chain observers tracked ETH, BNB, AVAX, USDT, and USDC; CEO Gracy Chen said the User Protection Fund, valued above $464 million, covers the loss. Preliminary evidence resembles earlier North Korean activity, including Lazarus Group, but attribution is unconfirmed; investigators suspect a backend or third-party compromise that forged transfers without stealing private keys.

Cyber Security Newsupdated Sep 25, 18:02 UTC · 1d agofirst Sep 25, 03:34 UTC · 2d agoData breach in the wild 9 sources

Bitget

Timeline9 articles

Appears with