Cointime

Cointime

Download App
iOS & Android
Home / Point

Bitget Hacker Converts Stolen Funds to 67,982 ETH (Approx. $183 Million) on EVM Chain

On September 25, according to monitoring by Lookonchain, Bitget exchange's hot wallet was hacked on September 24, resulting in a loss of approximately $351.6 million. The hacker has converted most of the stolen funds into 67,982 ETH (about $183 million) on the EVM chain. Bitget CEO Gracy Chen confirmed that the abnormal transfers occurred in some hot wallets and warm wallets, while the cold wallet remains secure. User account balances were not affected, and deposits and trading are normal, although withdrawals have been suspended pending a security review. She stated that all losses are covered by a user protection fund exceeding $464 million. On-chain data shows that the attacker exchanged $19.67 million for 7,111 ETH at about a 5% premium within six minutes. Additionally, Arkham reported that funds were transferred from three hot wallets and at least one cold wallet, contradicting the official claim of 'cold wallet security.' The method of attack has not been disclosed.

Comments

All Comments

Recommended for you

  • Spot Gold and Silver Rise in Short Term

    On September 25, spot gold and silver continued to rise in the short term, with gold reaching $4,290 per ounce, up 0.36% for the day. Silver surpassed $64 per ounce, gaining 0.24% during the day.

  • Bitget Theft Amounts to Approximately $357 Million, Including 10.3 Million XRP and 31,890 ETH

    On September 25, according to monitoring by Lookonchain, the stolen funds from Bitget include 102.93 million XRP (valued at $157.48 million), 31,890 ETH ($85.75 million), 34.75 million USDT ($34.75 million), 21.05 million USDC ($21.05 million), 19.67 million USD₮0 ($19.67 million), 3,000 XAUt ($12.82 million), 12,719 BNB ($9.88 million), 821,012 AVAX ($8.38 million), and 20.59 million TRX ($7.07 million), totaling approximately $357 million. Bitget has confirmed that unauthorized transfers occurred in its hot/warm wallets, and withdrawals have been suspended. The losses will be covered by a user protection fund exceeding $464 million.

  • 5-Year Japanese Government Bond Yield Rises to 2.4%, Setting a Record High

    On September 25, the yield on 5-year Japanese government bonds rose to 2.4%, setting a record high.

  • Bitget CEO: Recent Platform Attack Not Due to Key Leak, No Accurate Time for Withdrawal Recovery

    On September 25, Bitget CEO Gracy Chen publicly addressed the platform's recent attack during a live stream, stating that the platform is currently preparing to restore withdrawals, but there is no accurate timeline for recovery yet. Both internal and external technical teams at Bitget are working to identify the issues and develop solutions, aiming to restore relevant services as soon as possible. Gracy Chen noted that the method of attack in this theft incident differs from previous security events experienced by other exchanges. According to the current investigation, hackers did not execute the attack through key leaks; instead, they bypassed certain systems and initiated withdrawals through the system. She mentioned that a key leak would be the worst-case scenario, but this incident is not one of those. Due to the involvement of multiple cryptocurrencies and blockchain networks in this incident, Bitget cannot directly reopen withdrawals for the time being. Withdrawals will only be restored after confirming that funds are completely secure and a more robust handling plan is established. Gracy Chen stated that the platform has completed a comprehensive loss prevention measure and that no further attacks will occur; withdrawals will be reopened once the security issues are more definitively addressed.

  • Revolut Faces Data Breach Again, Involving Third Party DriveWealth

    On September 25, BeInCrypto reported that the U.S. brokerage DriveWealth confirmed unauthorized access to its network due to a social engineering attack from September 4 to 5. This breach only involved historical customer records of Revolut prior to a change in trading model, with individual customer information no longer shared in the European Economic Area (including Ireland) after December 2023. Recent users were not affected. The leaked data may include names, email addresses, phone numbers, mailing addresses, employment and identity information, as well as some account numbers; however, passwords, payment card information, bank details, and identification documents were not compromised. DriveWealth has directly contacted the affected customers, and Revolut followed up with an email. Additionally, another incident in September involving a spoofed government email affected approximately 680 customers.

  • Macron Announces Troop Deployment to Protect Saudi Yanbu Oil Facilities

    On the 24th, French President Emmanuel Macron stated that France will deploy troops to protect the oil facilities at Yanbu Port on Saudi Arabia's west coast from attacks by Yemen's Houthi forces, aiming to stabilize oil supply and control rising oil prices. In a joint interview with two French television stations, Macron mentioned that France has completed discussions with Saudi Arabia regarding this matter. The French side will send soldiers and deploy military assets such as radar and defense systems, while also adjusting air force resources stationed in the Middle East according to the evolving situation. He emphasized that this action is intended to protect the oil facilities in Yanbu, not to engage in the related conflict. (CCTV News)

  • Brazil Central Bank Requires Reporting of Transactions Over $10,000 to Self-Custody Wallets

    On September 25, Bitcoin.com reported that the Central Bank of Brazil has issued resolutions No. 588 and No. 589. Resolution No. 588 mandates that institutions authorized by the Central Bank report transactions 'transferring to or from self-custody wallets' valued at or exceeding $10,000. The relevant data will be submitted to the Financial Activities Control Council (COAF), the anti-money laundering regulatory body, which may lead to the creation of a database of self-custody addresses. Resolution No. 589 prohibits transactions with virtual asset service providers (VASPs) that are not authorized to operate in Brazil and establishes an information-sharing framework. Both resolutions will take effect on October 1, 2026, which is also the deadline for VASPs to obtain operating authorization in Brazil. The Central Bank noted that self-custody wallets are controlled by users rather than VASPs, which 'may reduce the availability of information for monitoring and risk assessment.' Increased compliance and capital requirements have impacted the market: currently, only five VASPs have submitted applications for operating licenses.

  • BTC Breaks Through $84,500

    Market data shows that BTC has surpassed $84,500, currently reported at $84,508, with a 24-hour increase of 0.07%. The market is experiencing significant fluctuations, so please ensure proper risk management.

  • 30-Year Fixed Mortgage Rates in the U.S. Surge to 7.45%

    On September 25, according to data from Mortgage News Daily, mortgage rates saw a significant increase on Thursday, with the average rate for a 30-year fixed mortgage reaching 7.45%. Other institutions, including Freddie Mac, reported earlier on Thursday that this rate had just surpassed 7%, but that data reflected the average level from the previous week.

  • France Plans to Convene G7 to Discuss Releasing Strategic Oil Reserves

    On September 25, French President Macron stated in a joint interview with two French television stations on the evening of the 24th that France intends to convene a meeting of G7 member countries to discuss the release of strategic oil reserves in order to stabilize international oil prices.

Daily Must-Read

Popular Activities

RaveDAO at Terra Solis by Tomorrowland: A Female-Led Techno Night Where Web3 Culture Converges

RaveDAO at Terra Solis by Tomorrowland: A Female-Led Techno Night Where Web3 Culture Converges

April 30 - April 30
Dubai

Popular Tags

Cointime
News
Contents
RSS
Company