Skip to content
Bitget Suffers $388M Theft via Zero-Day Exploit

Bitget Suffers $388M Theft via Zero-Day Exploit

First seen 30 Sep 2026, 12:29 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 30, 2026 at 17:31 UTC
  • •Bitget lost approximately $387.5 million due to a zero-day exploit.
  • •Attackers used web shells and malware to compromise Bitget's wallet systems.
  • •The incident is linked to North Korean hackers, according to Bitget's CEO.

Cryptocurrency exchange Bitget reported a breach resulting in the theft of approximately $387.5 million. The attackers exploited a zero-day vulnerability in third-party security products to gain unauthorized access to Bitget's wallet environment. Initial unauthorized transfers began on September 24, 2026, with two small test transactions that went undetected. Following this, larger transactions were executed, leading to the significant loss. Investigations by SlowMist and Mandiant confirmed the attackers used web shells and malware to facilitate the theft. Bitget has since suspended all withdrawals and launched a Recovery Bounty Program to recover stolen funds. The incident is attributed to North Korean hackers based on IP behavior and on-chain analysis. The breach highlights vulnerabilities beyond just private key protection in cryptocurrency exchanges.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-24
Initial unauthorized transfers detected
The attacker executed two small test transfers before larger withdrawals totaling $361 million occurred.
Financefeeds
2026-09-25
Major theft completed
The attackers executed multiple unauthorized transfers from Bitget's wallets, leading to a total loss of $387.5 million.
Bleepingcomputer
2026-09-30
Bitget announces Recovery Bounty Program
Bitget launched a program offering bounties for information leading to the recovery of stolen funds.
Bleepingcomputer

More articles in this cluster (2)

Following this threat?

Track Bitget in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (18)

1 / 3

Common questions

What was the total amount stolen?
Approximately $387.5 million was stolen from Bitget's wallets.
How did the attackers gain access?
The attackers exploited a zero-day vulnerability in third-party security products to gain unauthorized access.
What measures is Bitget taking now?
Bitget has suspended all withdrawals and launched a Recovery Bounty Program to recover stolen funds.