Binance founder @cz_binance has offered public support to rival exchange @bitget after hackers drained roughly $387.5 million from its hot wallets on September 24, 2026. CZ said he expects @b
Binance founder @cz_binance has offered public support to rival exchange @bitget after hackers drained roughly $387.5 million from its hot wallets on September 24, 2026. CZ said he expects @binance, the @BNBCHAIN ecosystem, and the broader community to help however they can. Bitget CEO @GracyBitget thanked him publicly, noting that every second counts when tracing stolen assets.
What Happened
Security systems at Bitget flagged unauthorized transfers from some of its hot wallets at 18:31 UTC on Thursday.The exchange's security team found that the attacker breached a critical backend wallet system, used it to spoof transfer information, and triggered Bitget's authorization-signing process.Private key compromise has been ruled out.The breach reached parts of Bitget's hot and warm wallet layers, while cold wallets, which sit offline, were not hit.
Bitget later added Zcash and additional TRON balances that had been left out of its first official count and raised the total to about $387.5 million.It said the revision is a fuller accounting of transfers during the incident, not more theft after the outflow was contained.On-chain tracker Lookonchain listed 102.93 million XRP (about $157.48 million) as the largest slice, followed by 31,890 ETH (about $85.75 million), then USDT, USDC, BNB, AVAX, and TRX.
North Korea Suspected, Users Protected
Bitget CEO Gracy Chen said investigators identified IP addresses linked to VPN services previously used by a North Korean hacking group, and that the pattern of the attack resembled earlier operations attributed to the country.The specific intrusion method used to enter Bitget's systems remains under technical investigation.
Withdrawals from the platform are currently suspended while the company works with security firms Mandiant and SlowMist on the recovery effort.According to Bitget CEO Gracy Chen, the stolen amount is covered by the exchange's User Protection Fund, which held more than $464 million when the incident occurred.The hack only affected Bitget Exchange. Bitget Wallet users were not affected.
The incident puts Bitget among the largest exchange hacks on record. North Korean hacking collectives have been implicated in approximately $2.02 billion worth of cryptocurrency theft throughout 2025, including the high-profile Bybit breach earlier that year.
Sources:The Record: Crypto CEO accuses North Korea of stealing $387 million from BitgetCoinDesk: Bitget's $352 million hack happened via spoofed transfers, not private keysGizmodo: North Korea 'Very Likely' Behind $388 Million Hack of Crypto Exchange Bitget