🚨* Date & Scale: On September 24, 2026, Bitget suffered a major breach resulting in an estimated loss of $351 million to $387 million in digital assets.
* Attack Method: Hackers compromised a critical backend wallet system, forging transaction data to trigger Bitget's own authorization processes across hot and warm wallets. Private keys were not stolen, and offline cold wallets remained completely secure.
* Suspected Actor: CEO Gracy Chen stated preliminary evidence (including IP behavioral patterns) points to a North Korean hacking group (such as Lazarus). Bitget is working with Mandiant and SlowMist on the ongoing investigation.
* Stolen Tokens: The breach spanned multiple chains (Ethereum, XRP Ledger, Arbitrum, Avalanche, BSC) involving ETH, XRP, USDT, USDC, BNB, and AVAX.
* Impact on Users & Operations:
* User Funds: All user account balances remain safe and accurate. Losses are fully covered by Bitget’s $464M+ User Protection Fund.
* Platform Status: Deposits and spot/futures trading remain fully operational. Withdrawals were temporarily paused as a security review was conducted.
* Bitget Wallet: The self-custodial Bitget Wallet operates on separate infrastructure and was unaffected.
* Attack Method: Hackers compromised a critical backend wallet system, forging transaction data to trigger Bitget's own authorization processes across hot and warm wallets. Private keys were not stolen, and offline cold wallets remained completely secure.
* Suspected Actor: CEO Gracy Chen stated preliminary evidence (including IP behavioral patterns) points to a North Korean hacking group (such as Lazarus). Bitget is working with Mandiant and SlowMist on the ongoing investigation.
* Stolen Tokens: The breach spanned multiple chains (Ethereum, XRP Ledger, Arbitrum, Avalanche, BSC) involving ETH, XRP, USDT, USDC, BNB, and AVAX.
* Impact on Users & Operations:
* User Funds: All user account balances remain safe and accurate. Losses are fully covered by Bitget’s $464M+ User Protection Fund.
* Platform Status: Deposits and spot/futures trading remain fully operational. Withdrawals were temporarily paused as a security review was conducted.
* Bitget Wallet: The self-custodial Bitget Wallet operates on separate infrastructure and was unaffected.
