Bitget Confirms Backend Breach Led to $388 Million Unauthorized Outflow

Bitget reported that attackers siphoned approximately $387.5 million from the exchange on Thursday by compromising a backend system within its wallet infrastructure. The breach allowed attackers to spoof transaction data and trigger the exchange's own authorization process, meaning the platform effectively signed the fraudulent transfers itself. Bitget has since patched the vulnerability and is working with Mandiant and SlowMist on the investigation. CEO Gracy Chen noted that the attack patterns align with techniques used by DPRK-linked groups, similar to the February 2025 Bybit incident. As of 6:34 p.m. ET Friday, approximately 68,300 ETH worth roughly $184 million remained held in identified attacker-linked wallets.