The digital asset sector has suffered another blow with a major hack targeting Bitget, one of the leading centralized exchanges. On September 24, 2026, abnormal fund movements triggered the company's security alert systems. This major breach directly targeted the platform's hot wallets—storage environments permanently connected to the internet to facilitate daily transaction liquidity.
According to the report compiled by technical teams, the total amount of stolen assets reached $351.6 million, immediately ranking this attack among the ten largest hacks in the history of the crypto sector. Despite the scale of the theft, the multi-layered security structure preserved the majority of client funds. The cold wallets, strictly isolated from the web, sustained no damage. As a final precaution, however, the company has temporarily suspended all withdrawals while finalizing a comprehensive audit.
To absorb the financial shock and prevent widespread panic among its users, management announced the full mobilization of its User Protection Fund. With over $464 million in reserves, this emergency mechanism is designed to guarantee full coverage of customer losses. Deposits and trading services remain fully operational as the entity seeks to reassure the market of its immediate solvency.
Regarding the investigation, initial findings from the cybersecurity unit point toward state-sponsored activity. Analysis of IP addresses and virtual private networks used during the intrusion suggests the direct involvement of cybercriminal groups linked to North Korea, an entity already notorious for its recurrent targeting of digital financial infrastructure worldwide.
This event once again highlights the persistent vulnerabilities affecting the management of connected treasuries within exchanges. As cyber threats intensify globally, the sector's ability to maintain robust compensation mechanisms has become a fundamental challenge in preserving the trust of both institutional and retail investors against increasingly sophisticated attacks.