Cryptocurrency exchange Bitget disclosed right this moment that suspected North Korean hackers have stolen $351.6 million from its sizzling and heat wallets.
The corporate found the breach Thursday night after its safety programs flagged a number of unauthorized transfers from a restricted variety of crypto wallets.
Bitget has quickly suspended all withdrawals whereas investigating the incident with assist from regulation enforcement companies, on-chain safety establishments, and cybersecurity specialists at Mandiant and SlowMist.
It additionally stated its self-custodial Bitget Pockets was not affected, because it operates on infrastructure unbiased of Bitget Exchange and was not impacted by the assault, and added that the Person Safety Fund (which holds 5,500 BTC presently price about $464 million) will cowl all losses.
“Based mostly on our present evaluation, roughly $351.6 million in property have been affected. Bitget’s chilly wallets and the overwhelming majority of platform property stay safe and unaffected,” it said.
“The incident falls inside the protection of Bitget’s Person Safety Fund, which presently holds greater than $464 million. Buyer account balances stay correct, and deposits and buying and selling proceed to function usually.”
The corporate has but to share extra data on how the attackers accessed its key backend wallet-service system to forge switch data and set off the authorization-signing course of.
Bitget CEO Gracy Chen stated the incident concerned the Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base chains and affected a number of property, together with ETH, XRP (single-chain loss is the most important), BNB, AVAX, USDT, USDC, and different tokens.
Chen added that some chains have additionally confirmed that the hacker pockets addresses have been frozen because the assault and linked the theft to North Korean hackers.
“Based mostly on IP habits patterns and on-chain evaluation, the assault technique in this incident is extremely according to identified patterns of North Korean hacker organizations. We’ve got reported to related establishments and are totally cooperating in conducting a world investigation,” Chen said.
“The attacker compromised a essential backend system inside our pockets infrastructure, used it to spoof transaction information, and triggered our authorization course of to maneuver funds out. No additional unauthorized transfers are potential. The particular technique of system intrusion stays below energetic investigation.”
In its latest update, Bitget stated it should restore withdrawals as quickly as potential, after investigators verify it is protected to renew regular operations.
North Korean risk teams have beforehand been linked to many different main crypto theft incidents, together with the Bybit hack, in which they stole $1.5 billion from the crypto exchange’s ETH chilly pockets, the most important crypto heist ever recorded.
Blockchain evaluation firm Chainalysis stated two years in the past that state-backed North Korean hacking teams stole $1.34 billion in 47 crypto heists all through 2024, whereas Elliptic estimated in February 2025 that North Korean hackers have “stolen over $6 billion in crypto property since 2017, with the proceeds reportedly spent on the nation’s ballistic missile program.”
Be part of Mikko Hyppönen and safety leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed assaults change, what defenders ought to cease doing, and learn how to validate, determine, repair, and re-validate at machine velocity.
