Skip to content
Bitget Suffers $351.6 Million Hack Linked to North Korean Attackers

Bitget Suffers $351.6 Million Hack Linked to North Korean Attackers

First seen 25 Sep 2026, 04:26 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 26, 2026 at 04:21 UTC
  • •Bitget lost approximately $351.6 million due to a hack attributed to suspected North Korean attackers.
  • •The breach involved spoofing transaction data through a compromised backend system, not a private key compromise.
  • •Withdrawals are suspended, but trading and deposits continue as the exchange investigates the incident.

On September 24, 2026, cryptocurrency exchange Bitget reported unauthorized transfers totaling approximately $351.6 million from its hot and warm wallets, attributed to suspected North Korean hackers. The breach was detected at 18:31 UTC and involved the compromise of a critical backend system, allowing attackers to spoof transaction data and trigger the exchange's authorization process. Bitget's cold wallets remained secure, and the incident is covered by its User Protection Fund, which holds over $464 million. CEO Gracy Chen indicated that the attack method aligns with known patterns of North Korean cyber operations. Withdrawals have been temporarily suspended while investigations are ongoing, and some blockchain foundations have already frozen the attackers' wallet addresses. The total loss estimate has since been revised to approximately $387.5 million as further assets were identified during on-chain tracing.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 40d ago How this analysis works

Timeline

2026-09-24
Unauthorized transfers detected
Bitget's security systems flagged unauthorized transfers from hot wallets at 18:31 UTC.
Punchng
2026-09-25
CEO confirms North Korean link
CEO Gracy Chen stated that the attack method is consistent with North Korean hacker organizations.
Investinglive
2026-09-25
Loss estimate revised
Bitget increased the estimated loss to approximately $387.5 million after further on-chain analysis.
FXDailyReport

More articles in this cluster (100)

Following this threat?

Track Lazarus and Bitget in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed