When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
According to Chen, Bitget detected abnormal transfers from some hot wallets on Thursday afternoon Eastern time. The hackers exploited a backend wallet system that processes wallet transactions, forging transfer approvals that tricked the system into authorizing the fraudulent transactions. She confirmed that cold wallets and private keys remained safe and uncompromised. The stolen assets include Ether, XRP, USDT, USDC, Avalanche, and BNB across the Ethereum, XRP Ledger, Avalanche, BSC, and Arbitrum networks. Early independent on-chain analysis initially put the total stolen value at $170 million to $183 million, before Bitget announced an initial official value of $351.6 million. Comprehensive audits revised the final official value to $387.5 million.
Bitget temporarily froze user withdrawals, while deposits and trading remained functional. The company announced that its over $464 million User Protection Fund would cover the full loss. It says it has fixed the backend vulnerability and is rolling out a staggered withdrawal schedule — starting Monday, September 28 — to manage network traffic and ensure complete infrastructure security .
After the attack, the hackers quickly converted the USDT, USDC, and tokenized gold (XAUt) directly into ETH on decentralized exchanges within minutes of the theft to circumvent on-chain blacklisting or freezing of the stablecoins. Native layer-1 assets like XRP, ETH, BNB, and TRX, which cannot be frozen or reversed, were quickly fragmented and distributed across dozens of new attacker-controlled wallets. Meanwhile, Bitget launched a recovery-bounty program offering rewards of up to 5% for funds successfully frozen or recovered.
The incident is the latest in a series of hacks in the crypto industry. Earlier this month, attackers drained $320 million in Bitcoin from the Liquid Network , emptying nearly 95% of its federation wallet. A similar incident occurred in April when crypto platform Drift lost $270 million in a hack . Many of the hacks that have plagued the crypto industry have been linked to state actors, with North Korea leading the pack. In February 2025, the FBI identified the North Korean hackers as the perpetrators behind the biggest crypto hack in history, stealing over $1.5 billion from Bybit.
North Korea used job interviews to deploy malware on 30,000 devices during coding tests
Hackers drain $320 million in Bitcoin from Liquid Network, emptying roughly 95% of federation wallet
Hacker turns 25 cents into 46 billion fake Bitcoins to steal $770,000
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cryptocurrency/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cryptocurrency/north-korea-named-as-primary-suspect-in-usd387-million-bitget-crypto-hack-investigators-identify-ip-addresses-tied-to-vpn-infrastructure-previously-used-by-north-korean-hacker-groups-thieves-swapped-stablecoins-for-eth-in-minutes-to-dodge-freezes#main
- https://www.tomshardware.com/membership
- G.Skill wins PC enthusiast as 'customer for life' by simply honoring its warranty replacement policy
- Counterfeit vinyl record maker sentenced to three years in the slammer after making $3.5 million
- Linux enthusiasts see 10-second kernel compilation times on the horizon
- Nvidia CEO says 'we have to shut the labs down' if AI experiments are unsafe
- Emerald AI, Google and NVIDIA Launch Alliance to Advance Flexible AI Data Centers
Informational only. No financial advice. Do your own research.