the north korean hacker crew has once again stolen $351.6 million from bitget this time
- on sept 24, bitget caught unauthorized transfers from their hot/warm wallets
- on-chain people spotted it first, then bitget confirmed it
- withdrawals paused immediately
- official number: $351.6 million
- hackers didn't steal private keys, they broke into a backend system, faked txn data, and tricked bitget's own approval process into moving the funds.
- so the exchangeโs machine approved the theft
- only exchange wallets got hit
- bitget says cold wallets are still safe
- user balances on the app were not rewritten
- biggest chunks were
$xrp and
$eth
- the attacker dumped freezeable stablecoins into eth fast so nobody could easily lock it
- bitget says its user protection fund has $464 million+ and covers the whole loss
-
@GracyBitget says IP patterns match north korean hackers (likely lazarus group, the same crew from past heists)
- full report was promised within 24 hours
- withdrawals come back after the security review