Data Breaches & Leaks BleepingComputer 2 weeks ago

Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

CN
CyberNew Threat Research Desk
• Original Reporting: BleepingComputer
CyberNew Threat Intel Assessment
Assessed Severity: HIGH
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Data Breaches & Leaks

Analyst Takeaway

"Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million. Bitget added that it has addressed the security vulnerability exploited in the incident and will restore withdrawal services for all other supported assets and networks as soon as possible. It also shared an estimated withdrawal..."

Recommended Defense & Mitigation

  • Access Review: Audit administrative roles, enforce phishing-resistant MFA, and review privilege escalations.
  • Credential Rotation: Rotate high-privilege service credentials and tokens associated with impacted services.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

Bitget

Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million.

Bitget added that it has addressed the security vulnerability exploited in the incident and will restore withdrawal services for all other supported assets and networks as soon as possible.

It also shared an estimated withdrawal resumption schedule, saying that it will also resume withdrawals for ETH (Ethereum, BSC, Arbitrum, Base, Optimism) on September 29 at 8:00 UTC, for USDT (Ethereum, BSC, Solana, Tron) on September 30 at 8:00 UTC, and for other tokens / Fiat / P2P assets starting October 2 at 8:00 UTC.

"The temporary withdrawal pause remains a security measure and is not related to the availability of user assets. User account balances remain unaffected, and Bitget's Protection Fund covers the financial impact of this platform-wide incident," it noted.

"The incident remains contained, and no further unauthorized transfers are possible. User funds are unaffected throughout this process. Trading and deposits continue to operate."

Bitget suspended all withdrawals on Thursday after its security systems flagged multiple unauthorized transfers from a limited number of crypto wallets and discovered that attackers had stolen $351.6 million from its hot and warm wallets.

Save your seat

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from BleepingComputer.

Primary Advisory →