News linked to both this project and an event.
ZachXBT stated that approximately 45 minutes ago, the stolen funds from the $6.3 billion Binance hack and the $388 million Bitget hack were transferred via THORChain and pooled into a single on-chain address. This flow of funds indicates that both incidents may have been carried out by the same attacker. ZachXBT pointed out that the Bitget attack was previously attributed to the North Korea-affiliated hacker group TraiderTraitor, which is also connected to earlier attacks, including those on Kelp DAO.
Odaily reports: On-chain detective ZachXBT posted on X that approximately 45 minutes ago, stolen funds from the $6.3 billion Binance security incident and the $388 million Bitget security incident flowed through THORChain into the same address and were mixed, indicating that both incidents were likely carried out by the same attacker.ZachXBT noted that the Bitget attack had previously been attributed to the North Korea-linked hacking group TraiderTraitor, which has also been linked to other security incidents such as Kelp DAO.
According to official sources, in response to recent security incidents involving Bybit, Bitget, and Binance, OKX founder and CEO Star stated that security should not be an area of commercial competition, but rather a shared responsibility of the entire crypto industry. Over the past decade, major exchanges have made significant progress in private key protection, but potential risks remain in access control and wallet management systems. He emphasized that no system is absolutely secure, and any major security breach at any exchange could undermine trust in the entire industry.Star called on major exchanges in the crypto industry to strengthen cooperation and jointly establish stricter industry security standards and coordinated response mechanisms, including adding verification and security delays for large withdrawals to unknown addresses and smart contract authorization transactions, and implementing key security restrictions at the cryptographic signing layer. Meanwhile, the industry should establish real-time security incident reporting, joint monitoring of suspicious funds, and rapid response mechanisms, and promote collaborative research in areas such as quantum-resistant cryptography and AI-driven security threat defense. He emphasized that no single company can safeguard the future of the crypto industry alone.
According to on-chain detective ZachXBT, insiders at Axis Robotics (AXIS) withdrew over 76 million AXIS tokens from a multisig wallet, valued at over $12 million. They subsequently dumped them via a decentralized exchange (DEX) and transferred part of the tokens to Bitget, causing AXIS to drop by approximately 40% over the past 24 hours.
Bitget will list Axis Robotics (AXIS) for spot trading in the AI zone. The deposit channel is now open, and the trading channel will open on October 21 at 21:00 (UTC+8).
Odaily reports: Blockchain project Qubic has disclosed that between October 17 and 18, approximately 2.94 trillion QU worth $1.3 million was transferred out of 1,404 wallets. The unauthorized transfers occurred between 23:42 and 01:26 the following day, after which network validators paused transactions at tick 85,371,949.Qubic stated that the incident involved predictable wallet seeds generated by older Apple devices and browsers, and that the issue has been fixed in version 4.26.4. Developers also secured other at-risk funds before the attacker could move them.About 87.1% of the stolen QU remains within the paused Qubic network, while approximately 12.9% was transferred to cryptocurrency exchange MEXC and frozen. Cryptocurrency exchange Bitget has suspended QUBIC deposits and withdrawals. Whether victims will be compensated is to be decided by Qubic's Computor cluster, and QEARN staking remains unaffected. (Bitcoin.com News)
a report from blockchain security firm Hacken shows that in Q3 2026, there were 107 security incidents in the crypto industry, with losses amounting to $1.18 billion, up 55% quarter-over-quarter. Of this, approximately $906.8 million in losses involved compromised vendors or development tools, known vulnerabilities that were not patched in a timely manner, and related components not being included in the latest audit scope.Hacken co-founder Andrii Matiukhin pointed out that project teams often only audit critical smart contracts, while wallets, signing systems, and third-party software may not be covered, leading investors to mistakenly believe that the project is secure as a whole. The report states that the largest loss event in Q3 was the attack on Bitget, with losses of at least $352 million, in which attackers exploited a vulnerability in a third-party security product to gain access to withdrawal infrastructure.Hacken also found that the asset security of some derivatives trading platforms and prediction markets relies on inadequate key management arrangements, but no vulnerabilities currently being exploited have been found in the relevant platforms. The company emphasized that security audits cannot replace continuous vulnerability management, and project teams still need to promptly fix known vulnerabilities and ensure that audits cover the system components that actually affect the safety of funds. (CoinDesk)
Odaily Report: According to on-chain detective Specter's monitoring, after ZachXBT disclosed that the Bitget attacker used Zcash (ZEC) to obscure stolen funds, other stolen funds have also begun flowing into ZEC, including funds from the Cryptobills Ledger incident and the $12 million Triple-A hack. Threat actors are using ZEC to move stolen funds.
Odaily reports: Cryptocurrency exchange Bitget has announced that it will cease providing services to certain users through a one-time measure. Bitget stated that user funds remain safe during the related service adjustments, and the platform will continue to operate.Affected users will receive follow-up steps, relevant deadlines, and fund withdrawal arrangements via email, in-app messages, and/or push notifications. Users who have not received official notifications from Bitget may continue to use their accounts normally.Bitget's customer support team will assist users with pending orders, withdrawals, and other account issues during the process, and reminds users to use only official channels and to beware of phishing links, impersonation accounts, and unverified information.On September 25, Bitget confirmed an unauthorized transfer and temporarily suspended withdrawals to investigate a security breach. Subsequent disclosures revealed that the incident involved approximately $388 million in stolen assets. (Cointelegraph)
According to a post by Xie Jiayin on X, Bitget now supports transferring more than 3,000 U.S. stocks and ETFs from external brokerages and converting them into U.S. stock tokens, rTokens.
Odaily News: Bitget has officially launched its rToken US stock transfer feature, currently supporting 3,000+ US stocks and ETFs. Users can transfer eligible stock assets from traditional brokerage accounts to Bitget, and upon arrival, the stocks will be automatically converted into spot US stock rTokens based on the corresponding share quantity. Bitget charges no fees throughout the entire transfer process.After transfer, the rTokens can be directly integrated into Bitget's Universal Exchange (UEX) ecosystem, where they can be used for wealth management, lending, margin, and other yield-generating products, enhancing the capital efficiency and use cases of stock assets. To coincide with the feature launch, Bitget has simultaneously introduced a reward campaign featuring a total of $1 million in SpaceX stock tokens (rSPCX). Users can earn corresponding SpaceX stock rewards based on their transfer amounts, with rewards distributed on a first-come, first-served basis. Users can select the stocks and quantities they wish to transfer on the US stock transfer page and use the in-page reward calculator to view the estimated transfer amount and corresponding campaign rewards.Bitget CEO Gracy Chen stated: "This feature is designed to help investors consolidate stock assets scattered across different brokerages into a unified ecosystem without selling their existing holdings, enabling flexible allocation across asset classes."
Odaily News: Bitget has launched a dual CandyBomb campaign, running from October 9 at 18:00 to October 19 at 18:00 (UTC+8). Details are as follows:Exclusive for new futures users: Complete designated net deposit and futures trading tasks to share a prize pool of 0.2 BTC, with a maximum of 0.002 BTC per person;Exclusive for new TradFi futures users: Trade designated contracts such as SanDisk and Micron to share a prize pool of 8 rSNDK, with a maximum of 0.08 rSNDK per person.
according to an official announcement, Bitget Stock+ has launched its "Multi-Leg Options Strategy" feature. The specific strategies include Covered Call/Put, Vertical Spreads, Straddle & Strangle, and Collar, further catering to users' professional trading needs in risk hedging, volatility trading, and directional speculation.Additionally, this feature supports a Portfolio Margin mechanism. When options positions are opened and form a risk hedge against a user's existing holdings, the system will automatically reduce or offset the corresponding margin requirements, helping to improve users' capital efficiency.Furthermore, the multi-leg strategy supports users in flexibly building and closing positions leg by leg (Leg in/Leg out). Currently, this feature is available during regular trading hours from 9:30 to 16:00 EST. For more product details, please refer to Bitget's official platform.
Odaily reports: A wallet linked to the $387.5 million Bitget exploit transferred 2,746 ZEC into Zcash's Ironwood privacy pool on Wednesday across three transactions, worth approximately $3.9 million.The funds account for roughly 15% of the ZEC stolen on September 24. The Ironwood privacy pool can conceal the sender, recipient, and transfer amount, but investigators may still be able to trace the path of funds returning to public addresses through transaction timing and amounts. (CoinDesk)
链上侦探 ZachXBT 发文表示，Bitget 被盗事件中疑似朝鲜关联的攻击者已开始将约 2700 枚 ZEC（约 380 万美元）转入 Zcash 的 Ironwood 屏蔽池。Bitget 热钱包此前共被盗约 1.89 万枚 ZEC，价值约 2830 万美元。
According to Odaily, the Bitget CEO posted on the X platform that P2P withdrawals will open at 8:00 UTC on Friday, along with other features.
Odaily reports: According to on-chain analyst Ai Yi's monitoring, Bitget transferred 2,000 BTC from its cold wallet to the protection fund address over the past 2 hours, worth $166 million. Currently, the on-chain balance of this address is 2,484.71 BTC, worth $206 million. Previously, GracyBitget and xiejiayinBitget had promised to top up the protection fund to $300 million within one week.
Odaily reports: According to monitoring by Yu Jin, Bitget has entered its third day since opening withdrawals. The peak withdrawal period has now passed, and combined with stablecoin fixed-yield offerings and PoolX ETH and BTC locked staking mining campaigns, the platform's funds have shifted to net inflow.Among these, ETH has seen approximately 28,900 ETH inflow and approximately 7,266 ETH outflow since withdrawals opened yesterday afternoon. The largest deposit address retrieved 20,000 ETH from Lido last night and transferred it to Bitget, worth approximately $54.66 million, to participate in the ETH pool's 11.27% APR campaign.Additionally, data shows that Bitget's net deposits for the full day yesterday were approximately $9.47 million, with net deposits of approximately $31.73 million from 0:00 to 8:00 today.
Odaily News — Gracy Chen, CEO of cryptocurrency exchange Bitget, said the company is not optimistic about recovering the $388 million in crypto assets lost in last week's security incident. Citing the Bybit hack in 2025 as a reference, she noted that approximately one year after that incident, only about 3.5% of the stolen funds had been frozen, and that this does not equate to a completed recovery.Bitget has set up a bounty program offering 5% rewards for frozen funds and recovered funds respectively. The NEAR Intents team said it has intercepted over $50 million in assets related to the attack and frozen approximately $500,000. Tether and Circle have blacklisted the relevant wallets, freezing $318,000 worth of USDT and USDC.Gracy Chen stated that preliminary investigations indicate the attack may match VPN addresses used by North Korea-linked groups, but Bitget has not yet fully ruled out the possibility of an insider job. Bitget has resumed withdrawals in phases, starting with Bitcoin transactions on Monday and continuing with ETH transactions on Tuesday. (Cointelegraph)
According to Onchain Lens monitoring, a whale swapped 20,040 stETH for approximately 20,000 ETH via 1inch, worth about $54.69 million; minutes later, the whale deposited 20,000 ETH into Bitget, worth about $54.66 million.