Bitget Confirms $351.6M Hot Wallet Breach, Points To North Korea-Linked Hackers
Cryptocurrency change Bitget confirmed on September 24, 2026, that it detected unauthorized transfers from a restricted variety of its scorching wallets at 18:31 UTC. According to the change, roughly $351.6 million in belongings have been affected, making this one of many largest change safety incidents since Bybit’s $1.5 billion loss.
Initial on-chain monitoring had urged that three scorching wallets and one chilly pockets have been compromised, with greater than $170 million moved and swapped into ETH; the change later clarified that its three-tier pockets structure contained the breach to parts of the new and heat pockets layers, whereas all chilly wallets throughout each chain have been confirmed safe and unaffected.
The stolen belongings span a number of chains, together with Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. The largest single loss occurred on the XRP chain, with roughly 102.9 million XRP valued at about $157.5 million taken.
Other affected belongings included roughly 31,890 ETH, 34.75 million USDT, 21 million USDC, 19.67 million USD₮0, 3,000 XAUt, 12,719 BNB, 821,012 AVAX, and 20.6 million TRX. On-chain investigators reported that the attacker swapped a lot of the EVM-chain proceeds into almost 68,000 ETH.
Bitget’s safety staff acknowledged that hackers breached a important backend system of the pockets service, cast switch particulars, and invoked the approved signing course of to maneuver funds out — explicitly ruling out personal key leakage. As a precaution, withdrawals have been suspended whereas deposits and buying and selling remained operational.
The change flagged the irregular addresses, engaged legislation enforcement and on-chain safety companies, and mentioned a number of blockchain foundations have already frozen attacker wallets. Bitget dedicated to hourly updates and a full incident report with root-cause evaluation inside 24 hours.
Financial Backing and Attribution Concerns
Bitget emphasised that consumer funds are absolutely protected, noting the loss falls inside its User Protection Fund, which holds greater than $464 million in publicly verifiable wallets, and that the change moreover maintains over $1 billion in proprietary capital. CEO Gracy Chen acknowledged that the fund alone is enough to cowl the losses and pushed again towards comparisons to FTX, arguing the platform is able to withstanding a possible withdrawal run. She additionally confirmed that Bitget Wallet operates on solely separate infrastructure and was not affected.
Regarding attribution, Chen mentioned the attacker’s identification can’t be confirmed with full certainty, however proof factors towards North Korea-linked actors. Certain IP addresses concerned within the breach carefully match VPN patterns utilized by a DPRK-associated group, and the assault methodology is per their recognized methods. Independent analyst Specter linked the stolen XRP, which was bridged, to the $24 million AFX hack from July attributed to the Lazarus Group sub-actor TraderTraitor. Bitget has notified related authorities and is cooperating with investigations globally.
The restoration of withdrawals stays pending, with Chen stating that no exact timeline will probably be dedicated to till system safety is absolutely confirmed, as remediation throughout the numerous affected cryptocurrencies and networks continues to be underway.
The put up Bitget Confirms $351.6M Hot Wallet Breach, Points To North Korea-Linked Hackers appeared first on Metaverse Post.
