Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
Bitget says suspected North Korea-linked hackers stole $351.6 million from hot and warm wallets.
Cryptocurrency exchange Bitget said suspected North Korea-linked attackers stole $351.6 million on September 24, 2026, from a limited set of hot and warm wallets holding ETH, XRP, BNB, AVAX, USDT, and USDC. The company said the attacker compromised a backend wallet system, spoofed transaction data, and bypassed authorization. Withdrawals were suspended while deposits and trading continued. Mandiant and SlowMist are investigating; Bitget said user balances, cold wallets, and the separate self-custodial Bitget Wallet were unaffected and that its User Protection Fund covers the loss. CEO Gracy Chen said some blockchain foundations froze suspected hacker addresses.
- About $351.6 million left Bitget hot and warm wallets on September 24.
- Attacker allegedly spoofed transactions after compromising the wallet backend.
- Assets included ETH, XRP, BNB, AVAX, USDT, and USDC.
- Mandiant and SlowMist are investigating; some hacker wallets were frozen.
- Bitget says customer balances, cold wallets, and Bitget Wallet were unaffected.
- Vendors
- Bitget
- Products
- Bitget Wallet
- Threat actors
- North Korea-linked hackers
- Victims
- Bitget
- Organizations
- BitgetMandiantSlowMistChainalysis
- Countries
- North Korea
From the original article
2 min read at securityaffairs.com
Bitget says suspected North Korea-linked actors stole $351. 6M from hot and warm wallets. Withdrawals were suspended while Mandiant investigates.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.