Bitget has reported a $387 million hack, likely linked to North Korean hackers, prompting an ongoing investigation and assurance of user compensation.
Significant Breach at Bitget
Bitget has disclosed a staggering breach of approximately $387.5 million, which is poised to be one of the largest cryptocurrency hacks of 2023. The incident, which occurred on September 24, has raised suspicions of involvement from North Korean hackers, although this connection is still under investigation by law enforcement.
Details of the Attack
The breach was first detected when Bitget's security systems flagged unauthorized transactions from its hot wallets at 18:31 UTC. Initial assessments revealed that around $183 million in various cryptocurrencies, including stablecoins and Ethereum, had already been transferred out within an hour. By the time Bitget publicly acknowledged the breach, the estimated losses had surged to $351.6 million, later revised to $387.5 million.
CEO Gracy Chen explained that the hackers managed to exploit a backend system of Bitget's wallet infrastructure, allowing them to spoof transaction data rather than accessing private keys or forging user withdrawal requests. This method enabled them to manipulate the system into approving transactions that appeared legitimate.
Investigation and Response
Blockchain analysts quickly began investigating the situation, with one researcher noting a suspicious wallet that spent $19.67 million in USDT to acquire Ethereum at inflated prices. Following the breach, Bitget halted all unauthorized transactions and confirmed that no further outflows could occur.
To cover the losses, Bitget's User Protection Fund, which holds over $464 million, will fully compensate affected customers, ensuring their account balances remain intact despite the hack. Trading and deposits continued as usual, although withdrawals were temporarily suspended as a precautionary measure.
Potential North Korean Links
Chen indicated that some IP addresses associated with the attack match those used by North Korean hacker groups, noting that the patterns observed align with previous attacks attributed to North Korea. While no definitive evidence has been released, Chen herself has been a victim of similar hacking attempts, losing $80,000 from a private wallet.
Future Actions
Bitget plans to provide a detailed report on the incident, including a root-cause analysis, once its technical teams have completed their remediation efforts. Withdrawals are expected to remain paused until further announcements are made regarding resuming services.
