Bitget controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile1 entries
2026
Mandiant and SlowMist reports detail zero-day attack method behind Bitget $387.5 million crypto theft
Issue disclosure
Investigation reports released on Sept. 30, 2026 by Mandiant, part of Google Cloud, and blockchain security firm SlowMist found that attackers compromised two third-party security products, exploiting a previously unknown (zero-day) vulnerability traced to Aug. 31, before obtaining privileged internal access to Bitget's production wallet systems and bypassing the normal customer-facing withdrawal process without stealing private keys to steal about $387.5 million. The attackers deleted traces after transfers to hinder the investigation. The reports did not attribute the attacks to North Korea, though Bitget CEO Gracy Chen had previously said preliminary technical indicators were highly consistent with known North Korean hacking groups.
Company response
Remediation — Bitget
Bitget has frozen approximately $1.1 million of the nearly $388 million stolen in last week’s cyberattack, CEO Gracy Chen told CNBC.
Remediation — Bitget
“We restored the Fund using Bitget’s own capital,” Chen said.
Clarification — Bitget
Bitget said user account balances were unaffected.
Remediation — Bitget
Source excerpt
Investigation reports released Sept. 30 by Mandiant , part of Google Cloud, and blockchain security firm SlowMist found that the attackers compromised two third-party security products before gaining access to Bitget’s production wallet systems.
Bitget has frozen a tiny fraction of the $387.5 million stolen in last week’s hack, and restored much of its protection fund.
The attackers were then able to obtain privileged internal access and bypass the normal customer-facing withdrawal process without stealing private keys, Mandiant reported.