Skip to content
Bitget Hack Attributed to North Korean Actors: $387 Million Stolen

Bitget Hack Attributed to North Korean Actors: $387 Million Stolen

First seen 5 Oct 2026, 05:06 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 5, 2026 at 06:03 UTC
  • •Bitget lost approximately $387 million due to a hack attributed to North Korean actors.
  • •The attack involved unauthorized transfers from hot and warm wallets, executed within three hours.
  • •Chainalysis utilized AI to trace the stolen funds across multiple blockchains rapidly.

On September 24, 2026, the crypto exchange Bitget experienced a significant hack, resulting in the theft of approximately $387 million in various cryptocurrencies. The attack was attributed to North Korean-linked actors by Chainalysis, which noted that the stolen funds were transferred across 23 transactions within three hours. Initially estimated at $351.6 million, the total loss increased as more stolen assets were identified. The breach involved unauthorized transfers from Bitget's hot and warm wallets, with the attackers using techniques consistent with previous DPRK hacking incidents. Chainalysis developed AI tools to trace the stolen funds across multiple blockchains, significantly reducing the time needed for tracking from over 20 hours to under 10 minutes. This incident marks a continuation of North Korea's aggressive cyber theft strategy, which has reportedly exceeded $1 billion in crypto thefts for 2026 alone.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-24
Bitget hack occurs
Unauthorized transfers drained cryptoassets from Bitget's wallets, initially estimated at $351.6 million.
Startupfortune
2026-10-01
Total loss confirmed
After further investigation, the total loss from the Bitget hack was confirmed to be $387 million.
Startupfortune
2026-10-05
Attribution to DPRK actors
Chainalysis attributed the hack to North Korean-linked actors based on transaction patterns and techniques.
Cryptoticker

More articles in this cluster (2)

Following this threat?

Track Bitget in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What cryptocurrencies were affected?
The hack involved various cryptocurrencies including ETH, XRP, BNB, AVAX, USDT, and USDC.
How quickly did the attackers move the funds?
The stolen funds were moved across 23 transactions within three hours of the breach.
What measures should Bitget users take?
Users should monitor their accounts closely and consider withdrawing funds to secure wallets.