Skip to content
Bitget Hack Drains $157M in XRP, Hacker Redistributes Stolen Funds

Bitget Hack Drains $157M in XRP, Hacker Redistributes Stolen Funds

First seen 28 Sep 2026, 10:26 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 28, 2026 at 11:04 UTC
  • •Bitget lost over 102.9 million XRP in a security breach, totaling $157.48 million.
  • •The attacker redistributed 54 million XRP, increasing potential sell-side pressure.
  • •Bitget has suspended withdrawals but claims user balances are safe.

On September 24, 2026, Bitget confirmed a multi-chain security breach resulting in the theft of over 102.9 million XRP, valued at approximately $157.48 million. The attack exploited a vulnerability in Bitget's backend system, allowing unauthorized transfers without compromising private keys. The total loss from the incident is estimated at $351.6 million, with XRP suffering the largest loss compared to other cryptocurrencies. Following the breach, the attacker redistributed 54 million stolen XRP across multiple wallets, raising concerns about potential selling pressure on the asset. Bitget has temporarily suspended withdrawals while conducting a security review but assures that user balances remain safe. The exchange is collaborating with security firms to investigate the incident, suspecting the involvement of the North Korean Lazarus Group.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-24
Bitget detects unauthorized transfers
Bitget's security systems identified unauthorized transactions at 18:31 UTC, leading to an emergency response.
Tradingview
2026-09-25
Bitget confirms total loss
Bitget reported a total estimated loss of $351.6 million due to the hack, with XRP being the most affected asset.
Tradingview
2026-09-28
Hacker redistributes stolen XRP
The attacker moved 54 million XRP from the original wallets, raising concerns about future selling pressure on the asset.
Finance.Yahoo

More articles in this cluster (2)

Following this threat?

Track Lazarus Group and Bitget in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed