www.bitget.com Bitget Suffers $387.5M Hack Amid Record Q3 Trading Volume
Article Content
- •Bitget reported a record $1.86 trillion trading volume in Q3 2026.
- •A hack on September 24 resulted in a loss of approximately $387.5 million.
- •The breach exploited zero-day vulnerabilities in third-party security appliances.
Bitget reported a record trading volume of $1.86 trillion for Q3 2026, but the quarter was marred by a significant security incident. On September 24, 2026, attackers exploited zero-day vulnerabilities in third-party security appliances to drain approximately $387.5 million from Bitget's hot and warm wallets. The breach was not mentioned in detail in Bitget's own Transparency Report, which focused on trading performance instead. Investigations by Mandiant and SlowMist confirmed that the attackers moved assets across 11 blockchains in under three hours. The breach is one of the largest exchange hacks of 2026, raising concerns about counterparty risk for finance professionals. Bitget's insurance pool was called upon to cover the losses from the incident, which highlights the need for improved security measures as the platform expands its offerings.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Bitget in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What was the financial impact of the hack?
How did the attackers gain access?
What measures is Bitget taking post-breach?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…