Cryptocurrency exchange Bitget has disclosed a major security breach in which suspected North Korean hackers stole $351.6 million from its hot and warm wallets. Critically, the company confirmed that its cold wallets — holding the vast majority of customer assets — remain secure and unaffected.
In a statement posted to X on September 29, the exchange detailed that its security systems detected unauthorized transfers at 18:31 UTC on September 24, 2026. According to Bitget, the attackers compromised backend systems to siphon funds from internet-connected wallets used for day-to-day trading and withdrawal operations.
The incident aligns with a well-documented pattern of activity attributed to state-sponsored hacking collectives operating out of North Korea. These groups have repeatedly targeted cryptocurrency infrastructure across Asia and globally, with stolen proceeds widely reported to fund state initiatives.
The breach also underscores a fundamental security principle in digital asset management: the segregation of funds. By keeping the overwhelming majority of assets in offline, air-gapped cold storage, Bitget avoided a total loss of client funds. While the compromise of operational wallets represents a significant financial hit, the containment of the breach validates the cold storage model as the industry's primary safeguard against catastrophic platform failure.
Bitget has not yet released a full technical post-mortem or detailed which specific cryptocurrencies were compromised. The exchange has indicated a comprehensive report is forthcoming. The final tally of user impact and any potential compensation plans remain open questions for follow-up coverage.
加密貨幣交易所 Bitget 披露發生重大安全事故，懷疑由朝鮮黑客所為的攻擊者從其熱錢包及溫錢包中竊取了 3.516 億美元。關鍵的是，該公司確認其存放絕大多數客戶資產的冷錢包保持安全且未受影響。
該交易所在 9 月 29 日於 X 平台發佈的聲明中詳述，其安全系統於 2026 年 9 月 24 日 UTC 時間 18:31 檢測到未經授權的轉帳。Bitget 指出，攻擊者入侵了後端系統，從用於日常交易及提現操作的互聯網連接錢包中轉移資金。
此事件符合歸因於在朝鮮運作的國家資助黑客組織有充分記錄的活動模式。這些組織多次針對亞洲及全球的加密貨幣基礎設施發動攻擊，據報所竊資金廣泛用於資助國家項目。
此次安全事故亦突顯了數碼資產管理的一項核心安全原則：資金隔離。透過將絕大部分資產存放在離線、氣隙隔離的冷錢包中，Bitget 避免了客戶資金的全數損失。儘管營運錢包被入侵造成了重大財務衝擊，但此次安全事故的成功控制，證實了冷錢包模式是業界抵禦平台災難性故障的首要保障。
Bitget 尚未發布完整的事後技術報告，亦未詳述哪些特定加密貨幣受到影響。該交易所表示將提供全面報告。用戶影響的最終統計及任何潛在賠償方案仍是後續報導有待解答的問題。