Hackers steal $351.6 million in Bitget crypto exchange hack
North Korean hackers steal $351.6 million from Bitget crypto exchange hot and warm wallets.
Cryptocurrency exchange Bitget has disclosed a significant hack where suspected North Korean hackers stole $351.6 million from its hot and warm wallets. The company discovered the breach after security systems flagged unauthorized transfers and has temporarily suspended withdrawals while investigating with law enforcement and security experts. Bitget stated that its User Protection Fund will cover all losses, and its self-custodial Bitget Wallet was not affected.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Bitget?
Get an email when a new story names Bitget, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Bitget breach highlights the critical risk of maintaining large balances in internet-connected hot and warm wallets, which are inherently more exposed to sophisticated attackers than cold storage. Suspected North Korean threat actors (likely Lazarus Group) have a well-documented history of targeting crypto exchanges, making them a known and persistent adversary that demands heightened defensive posture. The unauthorized transfers were caught by security monitoring systems, but not before hundreds of millions were exfiltrated, underscoring that detection alone is insufficient without equally rapid automated response and containment capabilities. Exchanges holding customer funds at scale must treat wallet architecture as a critical security control, not merely an operational convenience.
What helps against this
How we list vendors- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — North Korean hackers