Bitget Hack Losses Climb to $387 Million, North Korea Blamed

Bitget hack losses have climbed to $387.5 million, making it the largest crypto exchange breach of 2026 so far. Blockchain investigators say the pattern of wallet draining and fund laundering matches groups long linked to North Korea.

The exchange confirmed the higher tally this week after an initial estimate of roughly $351.6 million turned out to understate the damage. Bitget has set a deadline to reopen withdrawals once its security review and reserve top-up are complete.

What the Bitget Hack Losses Mean for Traders

Security researchers tracking the stolen funds say they were moved through a familiar chain of mixers and cross-chain bridges, a laundering signature investigators associate with the Lazarus Group and related North Korean cyber units. Pyongyang has previously denied involvement in similar exchange hacks despite blockchain evidence.

The breach lands in an otherwise mixed week for digital assets. Bitcoin traded near $84,000, down modestly over 24 hours, while Ethereum slipped under $2,700. The broader crypto market held near $2.98 trillion, with the Fear and Greed Index still reading “Greed” at 74 despite the hack headlines.

Not every story this week was bad news for security. Cosmos Hub said it recovered 1.27 million stolen ATOM tokens following a governance attack, showing that some communities can claw back funds when validators act quickly. LayerZero separately announced it would stop supporting thirteen low-activity blockchains, part of a broader industry trend toward consolidating infrastructure around fewer, better-secured chains.

For everyday users, the practical lesson is unchanged: exchange balances are not the same as self-custody, and even well-capitalised platforms remain attractive targets for state-linked hacking groups. Bitget says affected users will be made whole from company reserves, though it has not detailed a timeline.

Read our earlier report on Ethereum ETF inflows for more on where institutional money has been flowing this month.

Fact basis: reporting from Decrypt, corroborated by PYMNTS and Fortune, September 2026. This article is for information only and is not financial or investment advice.