cyber.hendryadrian.com
Cyber Attack & Data Breach · securityweek.com

Bitget Says Hackers Stole $351.6 Million in Crypto, Suspects North Korean Links

· Original article ↗

Summary

Bitget says hackers stole about $351.6 million from its hot wallets by compromising a backend system. The exchange suspects North Korean links but has not detailed its evidence; Mandiant and SlowMist are investigating.

Key points

  • Bitget says its security systems detected unauthorized transfers on September 24 from a small number of hot wallets; its cold wallets and separate Bitget Wallet infrastructure were not affected.
  • The stolen assets included ETH, XRP, BNB, AVAX, USDT and USDC across several blockchains.
  • Bitget says the attacker compromised a critical backend system in its wallet infrastructure to get fraudulent transfers approved; the company says private keys were not compromised.
  • CEO Gracy Chen said IP behavior patterns and on-chain analysis were highly consistent with known North Korean hacker patterns. No specific group was named, and Bitget has not detailed the evidence.
  • The company reported the incident to authorities. Mandiant and SlowMist are assisting with the investigation.
  • Chen said some blockchain foundations have frozen wallet addresses linked to the attacker.

Article Details

Victim Organization
Bitget
Incident Type
Cryptocurrency theft involving compromised backend wallet infrastructure and fraudulent transfers
Affected Data Size
Approximately $351.6 million in digital assets
Operational Impact
Unauthorized transfers from a small number of hot wallets; Bitget said its cold wallets and separate Bitget Wallet infrastructure were not affected.
Ransom Or Extortion
None reported
Claim Status
confirmed

People

Gracy ChenBitget CEO who said the attack’s methods were highly consistent with known North Korean threat-actor patterns; she did not name a specific group.

Vendors

MandiantMandiant and blockchain security firm SlowMist are helping with the investigation.SlowMistMandiant and blockchain security firm SlowMist are helping with the investigation.

Products

Bitget WalletIt also offers Bitget Wallet, a self-custodial wallet that the company says runs on separate infrastructure and was not affected.

Industries

CryptocurrencyCryptocurrency exchange Bitget says the hackers who stole roughly $351.6 million in digital assets from its systems used techniques that closely resemble those of known North Korean threat actors.

Related Articles