Bitget Hot Wallet Hacked – Attackers Stole $351.6 Million From Hot Wallets
Bitget confirmed a $351.6 million theft from hot and warm wallets while cold storage stayed secure.
Cryptocurrency exchange Bitget confirmed unauthorized transfers of about $351.6 million from parts of its hot and warm wallets, detected at 18:31 UTC on September 24, 2026. Offline cold wallets were unaffected, customer balances still reflect holdings, and withdrawals were paused while deposits and trading continued. On-chain observers tracked ETH, BNB, AVAX, USDT, and USDC; CEO Gracy Chen said the User Protection Fund, valued above $464 million, covers the loss. Preliminary evidence resembles earlier North Korean activity, including Lazarus Group, but attribution is unconfirmed; investigators suspect a backend or third-party compromise that forged transfers without stealing private keys.
- About $351.6 million was stolen from Bitget hot and warm wallets on September 24, 2026.
- Cold wallets stayed secure; balances remain accurate; withdrawals were suspended.
- A User Protection Fund above $464 million is said to cover the loss.
- North Korean and Lazarus-like patterns were cited, but attribution is unconfirmed.
- Attackers moved funds after system access without obtaining private keys.
- Threat actors
- Lazarus Group
- Victims
- Bitget
- Organizations
- Bitget
- Countries
- North Korea
From the original article
2 min read at cybersecuritynews.com
Cryptocurrency exchange Bitget has confirmed a security breach affecting approximately $351. 6 million in assets after unauthorized transfers were detected in parts of its hot and warm wallet infrastructure. The incident was identified at 18:31 UTC on September 24, 2026, prompting the security team to activate emergency response procedures within minutes.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.