The cryptocurrency industry has been shaken once again after Bitget became the victim of a massive security breach resulting in the loss of over 387 million dollars. This incident marks the largest crypto heist of the year so far, sending ripples through the market and causing Bitget’s native token, BGB, to dip nearly 7 percent shortly after the news broke. During a lengthy livestream on X, CEO Gracy Chen explained that the attackers likely bypassed traditional security measures by exploiting a backend system used for processing wallet transactions, essentially tricking internal approvals into treating fraudulent withdrawals as legitimate.
Evidence suggests that state sponsored actors from North Korea were behind the operation, fitting a growing pattern of sophisticated thefts targeting digital assets. According to data from Chainalysis, North Korean linked hackers have already stolen a staggering 2 billion dollars in cryptocurrency this year alone, using these funds to bypass international sanctions and secure hard currency. These groups often employ deceptive tactics such as planting covert IT workers within companies or using fake investor pitches to gain high level access to corporate systems.
In response to the crisis, Bitget has partnered with cybersecurity experts from Mandiant and SlowMist to conduct a thorough investigation and has implemented a bounty program offering rewards for any recovered funds. While withdrawals remain paused during the security review, Chen clarified that the theft was limited to company controlled hot and warm wallets and did not affect users who utilize Bitget’s self custodial wallet service. To reassure anxious investors, the exchange noted that its user protection fund contains over 464 million dollars, which is sufficient to cover all losses if the stolen assets cannot be clawed back.
This breach arrives amidst an alarming streak of volatility for the sector, following several other high profile attacks over the last few months. Recent hits include a 319 million dollar drain from Liquid Network and a concerning exploit involving Coldcard hardware wallets that cost users roughly 116 million dollars in Bitcoin. Together, these events highlight an escalating arms race between crypto platforms and highly organized hacking collectives determined to find cracks in even the most fortified digital vaults.
