Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Bitget says suspected North Korean hackers stole $351.6 million from hot and warm wallets after a backend compromise.
Cryptocurrency exchange Bitget said suspected North Korean hackers stole $351.6 million from a limited set of hot and warm wallets on September 24, 2026. The attackers compromised a critical backend system in the wallet infrastructure, spoofed transaction data, and triggered Bitget's authorization process to move funds. Impacted assets include ETH, XRP, BNB, AVAX, USDT, and USDC on Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. Cold wallets, customer balances, and the separate self-custodial Bitget Wallet were unaffected; withdrawals were paused while Mandiant and SlowMist investigate.
- Bitget reported $351.6 million stolen from hot and warm wallets on September 24, 2026.
- Attackers compromised a backend wallet system, spoofed transaction data, and triggered fund authorizations.
- Cold wallets and customer balances were unaffected; withdrawals were temporarily suspended.
- Stolen assets include ETH, XRP, BNB, AVAX, USDT, and USDC across several chains.
- Mandiant and SlowMist are investigating; some chain foundations froze suspected addresses.
- Vendors
- Bitget
- Products
- Bitget ExchangeBitget Wallet
- Threat actors
- North Korean threat actors
- Victims
- Bitget
- Countries
- North Korea
From the original article
2 min read at thehackernews.com
Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351. 6 million from its hot and warm wallets. "At 18:31 UTC on September 24, 2026, Bitget's security systems identified unauthorized transfers involving a limited number of hot wallets," BitGet said in a post shared on X.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.