News linked to this event type.
Odaily News: According to monitoring by Quit, users should revoke their contract approvals for Ethereum Payment Processor V2 and ApeChain Payment Processor V3 as soon as possible, using revoke.cash or other similar tools. Quit stated that if a user's assets were transferred without authorization and are currently held at an address starting with 0x71cf, the relevant assets are in a safe state, but affected users still need to revoke the aforementioned contract approvals.Previously, NFT marketplace Magic Eden was suspected of having an NFT security vulnerability, with a white hat hacker transferring 3,832 NFTs from hundreds of wallets, worth approximately $1.5 million. Quit stated that this transfer was a white hat operation, and the relevant NFTs are currently held at an address starting with 0x71cF and will all be returned once the risk is resolved.
On-chain data shows that a single address received a total of 3,832 NFTs from hundreds of different wallets within a short period, sparking concerns among community members about a large-scale NFT theft incident.
Bitget CEO Gracy Chen 发布安全事件最新进展称，平台正与独立第三方安全团队 Mandiant 和慢雾合作，对此次事件展开全面调查。 Gracy Chen 表示，目前用户账户余额保持完整，此次平台层面安全事件造成的影响将由 Bitget 用户保护基金覆盖；Bitget Wallet 采用自托管模式，其基础设施与 Bitget Exchange 相互独立，因此未受到此次事件影响。 目前 Bitget Exchange 的充值、交易及奖励等功能继续运行，但提币仍暂时暂停，平台正在进行额外安全核查，确认安全后将恢复。Bitget 官方公告也显示，提币服务目前仍处于暂停状态，充值和交易正常运行。 Bitget 表示，后续调查进展及安全事件相关信息将通过官方渠道持续公布。
according to monitoring, Magic Eden appears to have an NFT security vulnerability, with a white hat hacker moving 3,832 NFTs from hundreds of wallets.
Evercrest Technologies, an entity associated with KelpDAO, has filed a civil lawsuit in British Columbia, Canada against LayerZero Labs and its co-founder and CEO Bryan Pellegrino, formally initiating legal proceedings over the rsETH cross-chain bridge attack in April that caused approximately $292 million in losses.
Bitget CEO Gracy Chen posted a 12-hour progress report on the security incident on X, including:1. Affected assets include ETH, XRP (largest single-chain loss), BNB, AVAX, USDT, USDC, and other tokens. Affected chains include: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. All on-chain cold wallets have been confirmed secure and unaffected.2. All foundations of the affected chains have been contacted, and some foundations have confirmed the freezing of the hacker's wallet addresses.3. Based on IP behavioral characteristics and on-chain analysis, the attack methodology is highly consistent with known patterns of North Korean hacker groups. Relevant authorities have been notified, and full cooperation is being provided for a global investigation.4. Bitget Wallet (decentralized wallet) operates completely independently from Bitget exchange infrastructure, and this incident has no impact on it. Bitget Wallet assets are completely safe.5. Transparent disclosure regarding the platform's financial status: In addition to over $464 million in protection funds (all held in publicly verifiable wallet addresses), Bitget's own assets exceed $1 billion. User funds are covered at a 1:1 ratio, and all data can be verified on-chain.6. Regarding withdrawal recovery timing: The goal is to achieve full recovery as soon as possible. Once a specific time window is confirmed, an announcement will be made immediately. No commitment will be made to timelines that cannot be fulfilled.
Bybit co-founder and CEO Ben Zhou announced in a post that the Bybit team stands ready to assist in any capacity with the recent hacking incident targeting Bitget. Previously, when Bybit was compromised, Bitget provided support. Ben Zhou stated that Bybit is currently updating the LazarusBounty platform to help Bitget track the flow of the associated funds.
Odaily News: Bybit co-founder and CEO Ben Zhou posted that the Bybit team stands ready to assist Bitget in any way possible, noting that Bitget had previously offered assistance when Bybit suffered a hack attack.Ben Zhou stated that Bybit is updating the LazarusBounty platform to help Bitget track the flow of stolen funds and assist in recovering the related assets.
Binance Wallet announced the launch of real-time detection and risk blocking features targeting high-risk signature scenarios to prevent phishing attacks exploiting DeFi project authorization mechanisms. Binance stated that certain attacks only require tricking users into completing gas-free offline signatures, which can directly lead to stolen assets. It will continue to expand its risk identification scenarios and security protection coverage moving forward.
Bitget stated that the losses resulting from this hot wallet security incident will be covered by the protection fund following an assessment, and the fund will be replenished after use. The specific scope of compensation and terms will be announced separately.
Bitget Wallet stated on X that it operates independently from the Bitget exchange and is a self-custodial wallet. User assets always remain on-chain and are controlled by users themselves, isolated from the custodial infrastructure of the Bitget exchange.In response to the recent security incident at Bitget, Bitget Wallet has conducted preventive checks on its internal systems and found no security impact from the incident on Bitget Wallet's systems or users' self-custodied assets. Bitget Wallet is currently operating normally, and users are reminded to be vigilant against phishing and impersonation attempts and to obtain the latest information through official channels.
on-chain analyst Yu Jin has monitored that the $464 million risk protection fund Bitget claims can cover stolen assets is a total of 5,500 BTC, distributed across 3 wallet addresses.
Odaily News: According to LookonChain monitoring, the breakdown of assets stolen from Bitget is as follows:102.93 million XRP (approximately $157.48 million);31,890 ETH (valued at $85.75 million);34.75 million USDT (approximately $34.75 million);21.05 million USDC ($21.05 million);19.67 million USD₮0 ($19.67 million);3,000 XAUt (equivalent to $12.82 million);12,719 BNB (valued at $9.88 million);821,012 AVAX (valued at $8.38 million);20.59 million $TRX (approximately $7.07 million).
Odaily reports: On-chain analyst Specter has stated that they have established an on-chain connection between the Bitget attack and the AFX attack that occurred in July of this year. The latter involved approximately $24 million in stolen funds and was attributed to TraderTraitor.Specter claims that the XRP stolen from Bitget can be directly traced to the stolen funds from the AFX attack after being bridged across chains, leading them to believe that this attack may be related to Lazarus Group. The attribution is still pending further verification.
According to Lookonchain data, the assets stolen in the Bitget incident comprise 9 different token categories, totaling approximately $356.9 million in value. Of these, approximately 102.93 million XRP (worth around $157.48 million) represents the highest-valued category, alongside 31,890 ETH (approximately $85.75 million). The remaining stolen assets include approximately 34.75 million USDT ($34.75 million), 21.06 million USDC ($21.06 million), 19.67 million USD₮0 ($19.67 million), 3,000 XAUt ($12.82 million), 12,719 BNB ($9.88 million), 821,000 AVAX ($8.38 million), and 20.59 million TRX ($7.07 million).
According to the updated tracking data from SlowMist's MistTrack, the currently flagged Bitget hacker-associated addresses include 11 EVM addresses, 7 Ripple network addresses, and 1 TRON address.
Gracy Chen 称，目前确认相关损失已经完成，平台不存在进一步资金流失风险，黑客具体入侵手法仍在技术核查中，完整报告将在调查结束后发布。
Odaily reports: LayerZero Labs co-founder and CEO Bryan Pellegrino posted on X platform that KelpDAO has filed a civil claim lawsuit against him and LayerZero. Bryan Pellegrino stated that the claim is baseless and that he will face them in court in Vancouver to defend himself.It is reported that in April of this year, KelpDAO suffered a hack resulting in losses exceeding $292 million. The attacker used social engineering tactics to compromise a LayerZero developer account. Because KelpDAO employed a "single-verifier" configuration, the target contract executed asset release upon receiving only a single valid signature, leading to the theft of rsETH.
Odaily News: According to monitoring by Yu Chen, the assets stolen from Bitget this time amounted to about $351.6 million, of which about $192.6 million were stolen on EVM chains, mainly including stablecoins and ETH.Over the past few hours, the hacker has successively converted the stablecoins and other assets stolen on EVM chains into ETH. Currently, the relevant hacker EVM address holds a total of about 68,500 ETH, worth about $184 million.
Chainalysis data shows 9 Asian countries rank in the top 20 globally for crypto adoption; Bitget confirms $350 million was stolen, with the user protection fund covering the losses.