Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
September 25, 2026 
Bitget says suspected North Korea-linked actors stole $351.6M from sizzling and heat wallets. Withdrawals have been suspended whereas Mandiant investigates.
Cryptocurrency exchange Bitget says suspected North Korea-linked risk actors stole $351.6 million from a restricted variety of sizzling and heat wallets. The corporate detected unauthorized transfers on September 24 and quickly suspended withdrawals.
Bitget stated buyer balances, chilly wallets and most platform belongings stay safe. Mandiant and SlowMist are investigating the incident, whereas deposits and buying and selling proceed usually.
“We’re at the moment working with impartial third-party consultants Mandiant and SlowMist for a full investigation. Our first precedence is our customers. Consumer balances stay intact, and Bitget’s Consumer Safety Fund covers the affect on this platform-wide incident.” the corporate added. “Bitget Pockets operates as a self-custodial pockets on a very separate and impartial infrastructure from Bitget Exchange and was not affected by this incident. Bitget Pockets customers’ belongings stay onchain below customers’ management and stay unaffected.”
Bitget CEO Gracy Chen stated the safety breach affected ETH, XRP, BNB, AVAX, USDT and USDC throughout a number of blockchains. The attacker reportedly compromised a backend pockets system, spoofed transaction information and bypassed the authorization course of to maneuver funds. Bitget stated affected blockchain foundations have been contacted and a few have frozen hacker wallets.
“We have now contacted the foundations of all affected chains, and a few foundations have confirmed the freezing of hacker pockets addresses,” Chen explained. “Based mostly on IP conduct patterns and on-chain evaluation, the assault technique on this incident is very in line with recognized patterns of North Korean hacker organizations.”
Bitget is a cryptocurrency exchange and Web3 firm based in 2018. It gives providers for purchasing, promoting and buying and selling digital belongings, together with spot and futures buying and selling, copy buying and selling and different monetary merchandise. The corporate has expanded past crypto into conventional markets and now describes itself as a “Common Exchange.” Bitget says it serves greater than 120 million customers in over 150 nations and areas.
The attribution to North Korea-linked risk actors doesn’t shock. According to Chainalysis, North Korean hackers stole no less than $2.02 billion in cryptocurrency in 2025, bringing the estimated complete stolen by DPRK-linked actors to $6.75 billion.
The thefts more and more goal crypto exchanges and different digital-asset providers, with attackers utilizing methods starting from refined cyber intrusions to pretend IT-worker identities.
Comply with me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, Bitget)
