crypto exchange
2 articles with this tag
Bitget crypto theft (about US$387.5 million): are customer balances covered, and what account holders should do
On September 24, 2026 (UTC), the crypto exchange Bitget detected unauthorized transfers from part of its hot and warm wallets. It first estimated about US$351.6 million and on September 25 confirmed about US$387.5 million sent to attacker-controlled addresses. Bitget says customer account balances were not affected, that the loss falls within its User Protection Fund, that cold wallets were not touched, and that the entry point was a zero-day vulnerability in third-party security products, now remediated. Withdrawals were paused, then restored in phases; Bitget's page says they were fully restored on October 2. Bitget has not published the name of the affected product or a full root-cause report. This site's take: this was a theft from the exchange's own wallets, not a leak of customer data, so the main risk for account holders now is fake 'recovery' and 'compensation' messages. Turn on two-factor authentication, open Bitget only from your own bookmark, and never share a seed phrase, private key or verification code.
Unauthorized Access to Bithumb's Internal Groupware (Personal Data of 844 Customers Exposed): ID Numbers, Account Numbers and More, and What Customers Should Do
Bithumb, a crypto exchange in South Korea, discovered abnormal access by an unauthorized outside party to its internal mobile groupware system on October 27, 2026 and, according to Korean press reports of its announcement on October 29, found that customer personal data was exposed. Of 6,444 customers' records involved, 5,600 were in DRM-encrypted files that could not be read from outside, and 844 customers' data was exposed. The items vary by customer and include name, mobile number, email address, resident registration number, driver's license number, account number and ID card copies. 715 employees were also affected. Bithumb says the groupware is separate from exchange accounts and asset information, and no direct intrusion into the exchange service or customer database has been confirmed. This site's conclusion: treat any call, text or email that mentions your ID or account details as suspect, never share a one-time code or password, and check Bithumb's notice in the official app or site you open yourself.