The cryptocurrency exchange Bitget has suffered a major breach, with over $351 million stolen from its hot wallets in what’s now the largest crypto hack this year. The company believes the perpetrators are linked to North Korean hacker networks.
Bitget’s platform was compromised on Thursday, leading to unauthorized transfers of digital assets from its hot wallets—those actively connected to the internet and used for live trading. Following the hack, Bitget suspended all crypto withdrawals across its network as a safeguard. At present, the exchange has not provided a timeline for resuming withdrawals.
Bitget says its fund for user protection holds $464 million, a reserve it says should be enough to cover the losses caused by the theft. Though this fund should absorb the immediate damage, questions remain over how this incident might affect its customers and market confidence.
North Korea’s Growing Role in Crypto Crime
The company’s CEO has stated that the tactics used in the attack resemble those of well-known North Korean cyber groups. According to Bitget, these groups often exploit open-source tools to launch large-scale breaches—methods previously linked to funding the country’s nuclear weapons and missile programs.
Such observations are backed by recent data from blockchain analytics firm TRM Labs, which estimates that nearly 75% of all crypto thefts this year can be attributed to actors connected to North Korea. The Bitget case surpasses a prior attack this September in which hackers stole $340 million, though most of that sum was eventually returned, save for about $47 million.
Why This Breach Stands Out
What sets this incident apart is its magnitude and direction. Hot wallet hacks are among the riskier exposures for exchanges due to their online connectivity, which makes them more vulnerable to cyber intrusion. Bitget’s loss nearly doubles what many exchanges hold in reserve for disasters of this kind, but whether those measures are now sufficient is under scrutiny.
Acting swiftly, Bitget halted withdrawals entirely—an acknowledgment of the seriousness. Still, no timeline has been given for normal operations to resume, leaving users in limbo and markets unnerved.
All told, this latest seizure of $351 million marks the single largest crypto theft confirmed so far this year. It not only represents a material loss but also underscores weaknesses in current defense strategies against sophisticated state-linked cybercriminals.
The scale and sophistication of this attack send a stark warning across the crypto industry. Exchanges must reassess how they secure hot wallets, and governments should be prepared for how these thefts tie into broader security and geopolitical risk. As the fallout unfolds, what remains critical is transparency on remediation efforts, stronger infrastructure for digital asset safety, and greater coordination to counter cybercrime tied to nation-state actors.
