Bitget Loses $350M as Wallets Are Drained Across Multiple Chains

HACK OR EXPLOITBitget Loses $350M as WalletsAre Drained Across MultipleChains57IMPORTANCECLOSED3NEWS MEDIA3PIECESSep 25, 2026 00:30blockboard.net

Bitget said a security breach drained hundreds of millions of dollars from hot wallets across multiple chains, with later updates saying the attacker converted much of the stolen value into Ether. The exchange also said withdrawals were suspended while the incident was reviewed, and its CEO later linked early findings to North Korea-related activity without confirming who was behind the attack.

What this rests on

Claim by claim, with its source
✓
The exchange later said the attacker exchanged most of about $351.6 million in stolen Bitget-linked EVM-chain assets for 67,982 ETH.
✓
Another update said the attacker now holds roughly 68,500 Ether worth about $184 million after converting stolen stablecoins and other assets.
✓
Bitget said unauthorized transfers across several blockchain networks drained at least $350 million from its hot wallets, affecting ETH, USDT, USDC, AVAX and BNB.
✓
Chen said a preliminary review found IP addresses that matched VPN choices associated with a DPRK hacking group.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Bitget customers and traders were the first to see the impact, because withdrawals were suspended while the exchange reviewed the breach. The event also put the wider crypto sector on notice that funds across several chains and assets were involved, not just one token or one wallet.

In practice, the situation changed from live withdrawals to a pause in which access to funds was being checked. Bitget also said cold wallets were not affected, so the update narrowed the affected part of its setup to hot and warm wallets rather than every storage system it uses.

Market reaction

BG Bitget Token it is the asset of the company or protocol in the event from 2 h before to 4 h after the line marks the first headline
published
+0.00 % before publication
+0.00 % after
$2price at publication
12series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 25 00:29
Crypto Economy scoop
Breaks the event: $464M and $350M
+3 min
Sep 25 00:32
Cointelegraph adds
Sharpens the figure: $352M; brings into the story: IP, with quotes
+4 h
Sep 25 04:29

Thefts of a similar size

WhenWhat happenedFigure
23 days ago Bitget · Hot Wallet Key Compromised incident $387M
4.7 years ago Portal · Signature Verification Flaw incident $326M
41 days ago Liquid Network incident $320M
2.4 years ago DMM Bitcoin incident $305M
7 months ago Drift Trade · Proxy Upgrade Hijack incident $295M

4200 incidents stored · 21 were as large as this one or larger ($352M)