Bitget says $351.6 million was affected in wallet security breach; CEO cites possible North Korean link
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
The Facts
- Bitget reported approximately $351.6 million in unauthorized wallet transfers.
- The incident affected parts of Bitget's hot- and warm-wallet infrastructure.
- Bitget suspended withdrawals while it investigates and completes security checks.
- Bitget said deposits and trading remained operational during the withdrawal suspension.
- Bitget said its cold wallets remained secure.
- Chen said investigators found VPN-linked IP addresses associated with a North Korean hacking group.
- Bitget said its User Protection Fund exceeds $464 million and covers the loss.
- Bitget has not announced a timeline for restoring withdrawals.
Context
Why does Bitget suspect a North Korean group?
Chen said preliminary investigators identified IP addresses linked to VPN services previously used by a North Korean hacking group. She described the finding as an indication rather than a confirmed attribution. CNBC Cointelegraph
What systems did Bitget say were affected?
Bitget said the breach was limited to portions of its hot- and warm-wallet layers, and that its cold wallets remained secure. TokenPost Investing.com Cointelegraph
Where Left and Right agree, and where they split
- Where Left and Right agree
- Roughly $351.6 million moved out of hot- and warm-wallet systems while cold wallets held, the fund covers the loss, and no withdrawal timeline has been given.
- Where Left and Right split
- An exchange's obligation to prove safety to depositors before restoring withdrawals, or a nation-state exploiting financial infrastructure as a security threat.
- Why they won’t converge
- This is a trust-in-institution divide: one side treats an unfunded timeline as proof the exchange controls disclosure on its own terms, the other treats fund coverage and cold-wallet integrity as proof the system already worked.
How left and right read it
When an exchange holds other people's money, the burden of proof sits with the exchange, not with the customers waiting to get paid. Bitget says its protection fund exceeds $464 million and covers the roughly $351.6 million taken from its hot- and warm-wallet systems, yet it has announced no timeline for restoring withdrawals while deposits and trading keep running. That asymmetry is the problem.
A hostile state treating American-accessible financial infrastructure as a revenue stream is a national security problem, not merely a customer service failure. Chen says investigators found VPN-linked IP addresses tied to a North Korean hacking group, and roughly $351.6 million moved out of hot- and warm-wallet systems in unauthorized transfers. Cold wallets held. That matters, because it shows hardening works.
The receipts — 100 sources
Independent coverage (100)
Facts first. Then every angle.
The day’s biggest stories in one short brief — the facts everyone agrees on, then the competing values behind the headlines. Free in your inbox.