hack or exploit

Nearly $352M Moved From Crypto Exchange Bitget Wallets in Suspected Hack

23Importance
closedStatus
16News media
20Pieces
Published
Updated
Since then
18 new reports
In
Exchanges
Also mentions
BTCARKMBNB +1

Bitget said unauthorized transfers hit parts of its hot and warm wallet infrastructure on Sept. 24, with about $351.6 million affected and withdrawals paused while the exchange reviewed the incident. The exchange said cold wallets were not impacted, deposits and trading continued, and its user protection fund was meant to cover the loss. Several statements from Bitget’s CEO pointed to a likely North Korean connection, while other coverage said investigators were still examining the backend system involved.

Share on X Share on Telegram Share on Reddit Share on WhatsApp

Key claims & sources

✓
The exchange said the incident involved a portion of its hot wallets, while cold wallets and most platform assets were unaffected.
Bitget Says Hot-Wallet Attack Drained About $351.6 Million
✓
One report said the wallet breach hit hot and warm wallets and that investigators were examining a backend system compromise.
Bitget probe points to backend breach after $351.6M hack
✓
Bitget said unauthorized transfers were detected on Sept. 24 at 18:31 UTC, and the exchange put the amount affected at about $351.6 million.
Bitget Reports $351M Hot Wallet Breach, Says User Funds Are Covered
✓
Bitget said its User Protection Fund would cover the full loss, and customer balances would remain intact.
Bitget Reports $351M Hot Wallet Breach, Says User Funds Are Covered
✓
Bitget’s CEO also said investigators found IP addresses matching VPN choices used by a DPRK group.
Bitget CEO links $351M exchange breach to North Korean hackers
✓
Bitget paused withdrawals after the breach, while deposits and trading stayed open.
Bitget Says $351.6 Million in Assets Were Affected in Security Breach
✓
Another report said the exchange’s wallet backend was breached, while private keys were not obtained.
Bitget Says $351.6M Hack Hit Wallet Backend, Not Private Keys

What it means

Bitget users and traders noticed a pause in withdrawals after the Sept. 24 incident, while deposits and trading remained available. The exchange also said customer balances would stay intact and that the loss fell under its protection fund, which directly affects how account holders see their funds today.

In practice, the event shifted the focus from cold-wallet storage to the systems that prepare and move transactions inside the exchange. Cold wallets were described as unaffected, and Bitget Wallet was said to operate separately from the exchange and not be impacted, so those parts remained open as before even while withdrawal access was halted.

Market reaction i

Bitget TokenBGB it is the asset of the company or protocol in the event
first headline
-1.5% 2 h before
+2.1% 4 h after
$1.94price at publication
11data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 24 22:53
Bitcoin Magazine scoop
Breaks the event: $352M and $351.6M
+2 h 11 m
Sep 25 01:04
Coinpedia adds
Sharpens the figure: $350M, with quotes
+2 h 30 m
Sep 25 01:24
DefiLlama hacks echo our clock
No new facts: technique, unknown
+5 h 39 m
Sep 25 04:33
crypto.news context
Its angle: examine, probe; with quotes
+5 h 50 m
Sep 25 04:44
CP CryptoPotato adds
Adds $464M, with quotes
+6 h 23 m
Sep 25 05:16
CR Cryptopolitan adds
Adds $2B and $600M, with quotes
+6 h 26 m
Sep 25 05:20
+8 h 7 m
Sep 25 07:00
+8 h 10 m
Sep 25 07:04
Cryptonews.com echo
No new facts: uninterrupted, centralized, polymarket; with quotes
+8 h 21 m
Sep 25 07:15
The Daily Hodl echo
No new facts: comprehensive, overwhelming, importantly; with quotes
+9 h 20 m
Sep 25 08:13
BitPinas echo
No new facts: independently, application, operates; with quotes
+10 h 36 m
Sep 25 09:30
Crypto News Flash echo
No new facts: reconstruction, approximately, conventional; with quotes
+12 h 28 m
Sep 25 11:22
Coinpedia adds
Adds $1.5B and $300M, with quotes
+13 h 11 m
Sep 25 12:05
Crypto Economy echo
No new facts: precautionary, remediation, equivalent; with quotes
+13 h 44 m
Sep 25 12:37
The Cryptocurrency Post echo
No new facts: processing, typically, operating; with quotes
+13 h 53 m
Sep 25 12:46
Financial Times echo
No new facts: consistent, methods, highly; with quotes
+14 h 25 m
Sep 25 13:19
Protos echo
No new facts: acknowledged, investigator, reassurances
+23 h 19 m
Sep 25 22:12
ZyCrypto echo
No new facts: connection, affiliated, describing; with quotes
+1 d 7 h
Sep 26 05:57
crypto.news context
Its angle: developments, proposed, edition
+2 d 10 h
Sep 27 09:30
Crypto News Flash echo
No new facts: infrastructures, goplussecurity, intervention; with quotes

Thefts of a similar size

WhenWhat happenedFigure
44 days ago Bitget · Hot Wallet Key Compromised incident $387M
4.8 years ago Portal · Signature Verification Flaw incident $326M
2 months ago Liquid Network · Unbacked Cross-Chain Mint incident $320M
2.4 years ago DMM Bitcoin · Phishing incident $305M
7 months ago Drift Trade · Proxy Upgrade Hijack incident $295M

4282 incidents stored · 23 were as large as this one or larger ($352M)