North Korean hackers suspected in $351M crypto theft, the largest so far this year
ThinkingNews Desk · how this was written
North Korean hackers are suspected of draining more than $350 million from Bitget’s hot wallets during a recent cyberattack. The exchange has halted withdrawals and cited a $464 million user protection fund that should cover the loss. The breach aligns with known North Korean hacking patterns linked to funding the country’s nuclear program.
Written from all 3 reports below, not from any single one.
How it was reported
- TechCrunch·North Korean hackers suspected in $351M crypto theft, the largest so far this year
North Korean hackers are suspected of stealing more than $351 million from Bitget’s hot wallets during a Thursday cyberattack, the largest crypto theft reported this year. Bitget has halted withdrawals and cites a $464 million user protection fund that should cover the loss. The breach aligns with known North Korean hacking patterns, which have been linked to funding the country’s nuclear program.
- The Next Web·Bitget suspects North Korean hackers in $351.6m theft from its hot wallets
- TechMeme·Bitget CEO Gracy Chen says she suspects North Korean attackers exploited a backend system used to process wallet transactions to drain $387M from the platform (Camila Grigera Naón/Fortune)
Bitget’s CEO Gracy Chen confirmed that North Korean attackers exploited a backend wallet-processing system to drain $387 million from the exchange. The breach occurred during a Thursday night security incident that exposed vulnerabilities in Bitget’s transaction infrastructure. The company is investigating the attack and assessing the impact on user funds.
Related stories
- A newly discovered data leak has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs across 194 countries (Lawrence Abrams/BleepingComputer)4 outlets
- South Korean regulators fined Coupang $409M for a data leak in 2025 that exposed ~33.7M accounts and escalated into a diplomatic conflict with the US (Shinhye Kang/Bloomberg)3 outlets
- Kaspersky says Daemon Tools, a widely used app for mounting disk images, has been backdoored in a monthlong compromise that has pushed malicious updates (Dan Goodin/Ars Technica)3 outlets
- Klue hack results in data breach at several cybersecurity firms3 outlets