Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Summary
Cryptocurrency exchange Bitget has reported that suspected North Korean threat actors have stolen $351.6 million from its hot and warm wallets. The incident was identified on September 24, 2026, when unauthorized transfers were detected in a limited number of hot wallets.
IFF Assessment
This event represents a significant financial loss due to a suspected nation-state sponsored attack, which is detrimental to defenders.
Defender Context
This incident highlights the persistent threat posed by sophisticated threat actors, particularly state-sponsored groups, targeting the cryptocurrency sector. Defenders should be vigilant about the security of digital asset exchange wallets, especially the separation and protection of hot vs. cold storage, and monitor for similar large-scale theft campaigns.