Bitget's CEO says a $388 million breach exploited a vulnerability in a third-party service, with some stolen assets frozen and investigators assessing a possible North Korea connection.
Disclaimer: News content is based on public news sources and provided for information only. It does not constitute investment advice.
Bitget's CEO has publicly attributed a $388 million hack to a vulnerability in a third-party security system, according to a statement. The exchange has confirmed that some of the stolen assets have been frozen, though it has not yet disclosed the total amount recovered. Investigators are continuing their assessment, and the exchange is cooperating with authorities. The incident marks one of the larger exchange breaches reported in recent years, though the exact timeline of the attack has not been fully detailed. The CEO's emphasis on a third-party flaw suggests the exchange's own core infrastructure may not have been directly compromised.
A third-party security vulnerability typically involves a flaw in software or services provided by an external partner, such as a wallet provider, API service, or custody solution. When such a vulnerability is exploited, attackers can bypass an exchange's internal defenses without directly breaching its own systems. This distinction matters because it shifts part of the security responsibility to vendors and highlights the interconnected nature of crypto infrastructure. For Bitget, the CEO's statement implies that the attack vector originated outside the exchange's direct control. The incident may prompt exchanges to reassess how they audit and monitor third-party dependencies.
Bitget has confirmed that some stolen assets have been frozen, but the exchange has not revealed the total value recovered. Freezing stolen cryptocurrency often requires rapid coordination with other exchanges, blockchain analytics firms, and law enforcement agencies. Once assets are moved across blockchains, recovery depends on whether they pass through centralized platforms that can enforce freezes or through privacy-focused tools that obscure trails. The lack of disclosure on the recovered amount leaves uncertainty about the financial impact on Bitget and its users. The exchange's ongoing investigation will likely determine how much can ultimately be returned.
Investigators are assessing whether North Korea may be linked to the Bitget hack, according to the source. North Korea-linked hacking groups, such as Lazarus, have been accused of orchestrating numerous cryptocurrency thefts to fund state programs, though attribution is often complex and takes time. If a connection is confirmed, it could trigger international sanctions and heightened law enforcement involvement. The assessment remains ongoing, and no formal attribution has been made. This geopolitical dimension adds another layer of complexity to the exchange's recovery efforts.
Bitget's CEO says a $388 million hack exploited a third-party security vulnerability, and some stolen assets have been frozen. The exchange has not disclosed how much has been recovered, and investigations are ongoing. This is one of the larger exchange breaches reported in recent years.
Exchanges often rely on external providers for wallets, APIs, or other services. If an attacker finds a flaw in one of those services, they can potentially access funds without breaching the exchange's own core systems. This makes vendor security a critical part of an exchange's overall defense.
North Korea-linked hacking groups have a history of targeting cryptocurrency exchanges to steal funds, often to support state programs. Investigators are assessing whether similar tactics were used in the Bitget case, but no official attribution has been made yet. Such assessments typically involve blockchain analysis and intelligence sharing.
The $388 Million Breach and Immediate Response
Understanding the Third-Party Vulnerability
Frozen Assets and the Recovery Challenge
Possible North Korea Connection Under Review
This article is rewritten from public news sources and further processed by AI. It is provided for information only and does not constitute investment advice — refer to the original source for the authoritative version.
Stolen assets are often moved quickly across multiple wallets and exchanges to obscure their origin. Some may be frozen if they reach centralized platforms that cooperate with investigators, but recovery can be limited if the funds are routed through privacy tools. The process can take months or years.
Exchanges usually freeze remaining assets, notify law enforcement, and work with blockchain analytics firms to trace stolen funds. They may also enhance security measures and communicate with users about the incident. The specific response can vary depending on the scale and nature of the breach.
