Bitget lost $387.5M without a single private key being compromised.
On Sept 24 at 18:31 UTC, Bitget detected unauthorized transfers. The estimated loss increased from $351.6M to $387.5M as investigators tracked ZEC, TRX, and additional chains.
The attackers manipulated backend transaction data, making the payouts appear legitimate and allowing Bitget’s own authorization system to approve them. Importantly, the cold wallets were never accessed.
Tether and Circle froze around $318K in stablecoins. Bitget’s $464M Protection Fund will cover the loss, while withdrawals are expected to resume from Sept 28.
BGB dropped around 3.3%.
Gracy Chen has attributed the attack to North Korean groups.
⚠️ $POPCAT $BLESS $SPORTFUN
On Sept 24 at 18:31 UTC, Bitget detected unauthorized transfers. The estimated loss increased from $351.6M to $387.5M as investigators tracked ZEC, TRX, and additional chains.
The attackers manipulated backend transaction data, making the payouts appear legitimate and allowing Bitget’s own authorization system to approve them. Importantly, the cold wallets were never accessed.
Tether and Circle froze around $318K in stablecoins. Bitget’s $464M Protection Fund will cover the loss, while withdrawals are expected to resume from Sept 28.
BGB dropped around 3.3%.
Gracy Chen has attributed the attack to North Korean groups.
⚠️ $POPCAT $BLESS $SPORTFUN
