Crypto exchange Bitget reports over $350 million in unauthorised transfers; Elliptic says a North Korea link is highly likely
Reported1 distinct origin, 0 independent.
Bitget detected unauthorised transfers at about 18:31 UTC on 24 September, suspended withdrawals and said its User Protection Fund fully covers the loss, Elliptic reported on 25 September, putting the amount at over $350 million. Bitget's chief executive Gracy Chen said the attack did not involve a private key compromise and was consistent with techniques used by DPRK-linked hacker groups. No government attribution was found.
- When
- 24 September 2026
- Where
- No fixed place, No single country
- What
- cyber, financial
- Attribution
- Not attributed. No government has named an attacker. Blockchain analytics firm Elliptic said multiple indicators suggest the exploit is highly likely linked to the DPRK, and Bitget's chief executive said the perpetrator was likely a North Korean group; North Korea has not answered.
- In the record
- Published 2026-11-09 22:52 UTC · backfilled
Sources
- Evidence Elliptic
is highly likely to be linked to the Democratic People's Republic of Korea (DPRK).
History
- First recorded 9 Nov, 22:52 UTC, as reported (one origin only).
Cite or reuse
The War Record, "Crypto exchange Bitget reports over $350 million in unauthorised transfers; Elliptic says a North Korea link is highly likely", record ev-20261109-2mkt, version 1, https://thewarrecord.com/events/ev-20261109-2mkt/