Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
The Finance Base
The Money Desk · Blog
Re:

Bitget Hack Update: XRP, Bitcoin, and the Suspected North Korean Link

Bitget says attackers exploited part of its hot and warm wallet infrastructure. XRP tracing led analysts to Bitcoin, while a possible North Korean link remains unconfirmed.
From TheFinanceBase Team3 min to read

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Bitget reported that attackers moved about $387.5 million from some hot and warm wallets on September 24, 2026. XRP was among the affected assets, and blockchain analysts traced stolen XRP through a cross-chain route into Bitcoin. Analysts have assessed a possible North Korean connection, but public information does not establish that attribution as confirmed. Bitget says cold wallets and private keys were unaffected; its latest reviewed update confirms BTC and ETH withdrawals resumed, while later withdrawal phases were scheduled rather than independently confirmed complete.

What happened in the Bitget hack?

Bitget says its security system detected unauthorized transfers at 18:31 UTC on September 24, 2026, from some of its hot and warm wallets. In its later investigation, the exchange described a vulnerability in a third-party security product that attackers used to obtain internal access credentials. They then submitted forged withdrawal instructions that bypassed risk controls. Bitget says its cold wallets were unaffected and private keys were not compromised. Bitget incident update; Bitget investigation chronology.

The incident affected 12 hot and warm wallet addresses and involved activity across 11 blockchains, according to Bitget. Those details describe the exchange’s operational accounting, not a separate set of later transfers.

Why did Bitget’s loss estimate increase?

Bitget initially estimated the affected amount at $351.6 million. After more complete accounting, it revised that figure to approximately $387.5 million; a later explainer rounded it to approximately $388 million. Bitget says the higher figure reflects reconciliation of the same incident, not additional transfers after containment. Bitget incident update; Bitget explainer.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How were XRP and Bitcoin involved?

Chainalysis’s tracing analysis estimated that about $387 million moved in 23 transfers during the first three hours, across Ethereum, the XRP Ledger, Zcash, and Tron. Its allocation of those flows was 49.7% Ethereum, 40.8% XRP, 7.6% Zcash, and 1.8% Tron. These are Chainalysis tracing figures, not Bitget’s incident accounting, and the percentages are rounded. Chainalysis’s analysis.

Chainalysis says the attackers routed stolen XRP through a cross-chain liquidity protocol and received Bitcoin on the other side. That describes a tracing path from XRP into BTC; it does not mean Bitcoin itself was the original asset taken from a Bitget wallet in that route.

Rank #2
Sale
The Psychology of Money: Timeless lessons on wealth, greed, and happiness
  • Ideal for Gifting
  • Ideal for a bookworm
  • Compact for travelling

Is the Bitget hack linked to North Korea?

The North Korean connection remains an attribution assessment, not a confirmed finding. Early coverage reported Bitget CEO Gracy Chen’s characterization that the activity was highly consistent with known North Korean hacker patterns. Elliptic later assessed a link to the Democratic People’s Republic of Korea (DPRK) as “highly likely,” citing infrastructure overlap, off-chain indicators, and laundering methodology. Elliptic also noted that Bitget had not published the technical basis for its own attribution. Elliptic’s analysis.

Accordingly, it is accurate to say that analysts have linked the incident to suspected DPRK actors; available public evidence does not justify calling it a confirmed North Korean attack.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Have Bitget withdrawals resumed?

Bitget’s update confirms that BTC withdrawals resumed on September 28, 2026, and ETH withdrawals resumed on September 29. It scheduled USDT withdrawals for September 30 and other supported assets, fiat, and peer-to-peer (P2P) services for October 2. The reviewed update does not independently confirm that every scheduled phase was completed by October 3, so withdrawal availability should be checked for the particular asset and network in Bitget’s current service status. Bitget incident update.

What does Bitget say about customer balances and recovery?

Bitget says customer account balances were unaffected and that its Protection Fund was intended to cover the incident’s financial impact. These are the exchange’s assurances, not independently verified findings. Bitget says the incident was contained and that it is continuing to trace and recover funds. Its reviewed update reports that some assets were frozen but gives no stable total for recovered funds. Bitget incident update.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How can Bitget users avoid recovery scams?

Bitget warns that it will not ask users to transfer funds or disclose passwords, private keys, seed phrases, or verification codes under the pretext of helping recover assets or resume withdrawals. Treat unsolicited recovery offers with suspicion, and use the exchange’s official support channels rather than links or contact details sent by strangers. Bitget’s security warning.

Quick Recap

SaleBestseller No. 1
SaleBestseller No. 2
The Psychology of Money: Timeless lessons on wealth, greed, and happiness
The Psychology of Money: Timeless lessons on wealth, greed, and happiness
Ideal for Gifting; Ideal for a bookworm; Compact for travelling
$10.99
SaleBestseller No. 5
I Will Teach You to Be Rich: No Guilt. No Excuses. Just a 6-Week Program That Works (Second Edition)
I Will Teach You to Be Rich: No Guilt. No Excuses. Just a 6-Week Program That Works (Second Edition)
It can be a gift option; Comes with secure packaging; Helpful in various ways
$9.15
Best Value
Sale
I Will Teach You to Be Rich: No Guilt. No Excuses. Just a 6-Week Program That Works (Second Edition)
  • It can be a gift option
  • Comes with secure packaging
  • Helpful in various ways

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More post from the Money Desk

  1. The Money DeskBlogTheFinanceBase07 MAR 2625 minWhat Is a 457 Plan?
  2. The Money DeskBlogTheFinanceBase07 MAR 2621 minTime Value of Money: What It Is and How It Works
  3. The Money DeskBlogTheFinanceBase07 MAR 2627 minAre You Living in One of These Top 10 Most Expensive Cities to Retire?
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.