News linked to both this project and an event.
AI is accelerating the cyberattack process, with researchers noting that attackers have already used autonomous tools to automate phishing, vulnerability research, and credential theft. Binance stated that its October 30 incident is estimated to have caused a $6.3 billion impact; the Bitget incident in September involved approximately $387.5 million transferred to attacker-controlled addresses. Neither company has publicly attributed the incidents to AI.Google's threat intelligence unit said attackers are shifting from simple AI prompts to agentic attack workflows. In a 2026 case disclosed by Google, attackers used AI agents to carry out large-scale credential theft in under 6 hours, resulting in the leakage of thousands of third-party credentials; Anthropic has also observed attackers running AI agents in parallel to conduct reconnaissance, vulnerability exploitation, and theft.This summer, a partial seed randomness flaw in COLDCARD-generated seeds was linked to the theft of 1,367 bitcoins across more than 4,500 addresses, worth close to $116 million at the time. Keystone disclosed that an October website incident leaked personal information related to 25,964 buyer records; FBI records show that from January to November 2025, reported losses from account takeovers exceeded $262 million. (Bitcoin.com News)
According to official statements, Bitget Wallet stated that in response to the security incident at Binance today, it has immediately collaborated with Binance's security team to continuously track the flow of involved funds, including those transferred via the Bitget Wallet cross-chain bridge.
ZachXBT stated that approximately 45 minutes ago, the stolen funds from the $6.3 billion Binance hack and the $388 million Bitget hack were transferred via THORChain and pooled into a single on-chain address. This flow of funds indicates that both incidents may have been carried out by the same attacker. ZachXBT pointed out that the Bitget attack was previously attributed to the North Korea-affiliated hacker group TraiderTraitor, which is also connected to earlier attacks, including those on Kelp DAO.
Odaily reports: On-chain detective ZachXBT posted on X that approximately 45 minutes ago, stolen funds from the $6.3 billion Binance security incident and the $388 million Bitget security incident flowed through THORChain into the same address and were mixed, indicating that both incidents were likely carried out by the same attacker.ZachXBT noted that the Bitget attack had previously been attributed to the North Korea-linked hacking group TraiderTraitor, which has also been linked to other security incidents such as Kelp DAO.
According to official sources, in response to recent security incidents involving Bybit, Bitget, and Binance, OKX founder and CEO Star stated that security should not be an area of commercial competition, but rather a shared responsibility of the entire crypto industry. Over the past decade, major exchanges have made significant progress in private key protection, but potential risks remain in access control and wallet management systems. He emphasized that no system is absolutely secure, and any major security breach at any exchange could undermine trust in the entire industry.Star called on major exchanges in the crypto industry to strengthen cooperation and jointly establish stricter industry security standards and coordinated response mechanisms, including adding verification and security delays for large withdrawals to unknown addresses and smart contract authorization transactions, and implementing key security restrictions at the cryptographic signing layer. Meanwhile, the industry should establish real-time security incident reporting, joint monitoring of suspicious funds, and rapid response mechanisms, and promote collaborative research in areas such as quantum-resistant cryptography and AI-driven security threat defense. He emphasized that no single company can safeguard the future of the crypto industry alone.
OKX founder Star stated that following a series of security incidents at Bybit, Bitget, and Binance, he called on industry CEOs to join forces and establish stronger security standards and coordinated response mechanisms, including mandatory security restrictions at the signature layer, real-time incident reporting, and rapid freezing of stolen assets.
according to a post by SlowMist CISO @im23pds, the extortion/disclosure group FulcrumSec has publicly claimed to have continuously stolen approximately 10.6 TB of data from PingCAP's managed database service TiDB Cloud, and has released about 200GB of first-stage samples.On the same day, PingCAP issued a statement acknowledging that "some internal operational data" was accessed without authorization, but emphasized that no product vulnerabilities were involved and that the security of customer databases and business data would not be affected. Companies such as Bitget and Baidu have previously collaborated with this data company.
Xie Jiayin, Head of Greater China at Bitget, stated in a post that an investigation confirmed hackers breached and accessed data from the TiDB Cloud database product under PingCAP. Bitget had previously collaborated with the company alongside partners such as Baidu. He clarified that Bitget only stored some public trade log data in the database (i.e., data visible to all users in the trading channel) and had discontinued using the service more than two months ago. The incident did not involve any user data, and no sensitive information such as passwords was leaked.
The hacker group FULCRUMSEC has publicly disclosed a cyberattack targeting the TiDB Cloud managed platform operated by distributed database provider PingCAP. Over the past two months, attackers exploited leaked cloud credentials from its codebase to continuously infiltrate systems, cumulatively exfiltrating 10.6 TB of core data and publicly releasing over 200 GB of data packs in the initial phase. Exposed records indicate that affected entities include blockchain-related companies such as Bitget, Pionex, DigiPlus, NFTscan, and Chainbase, as well as prominent multinational corporations including Booking.com, Shopee, and Capcom.
Odaily reports: Blockchain project Qubic has disclosed that between October 17 and 18, approximately 2.94 trillion QU worth $1.3 million was transferred out of 1,404 wallets. The unauthorized transfers occurred between 23:42 and 01:26 the following day, after which network validators paused transactions at tick 85,371,949.Qubic stated that the incident involved predictable wallet seeds generated by older Apple devices and browsers, and that the issue has been fixed in version 4.26.4. Developers also secured other at-risk funds before the attacker could move them.About 87.1% of the stolen QU remains within the paused Qubic network, while approximately 12.9% was transferred to cryptocurrency exchange MEXC and frozen. Cryptocurrency exchange Bitget has suspended QUBIC deposits and withdrawals. Whether victims will be compensated is to be decided by Qubic's Computor cluster, and QEARN staking remains unaffected. (Bitcoin.com News)
a report from blockchain security firm Hacken shows that in Q3 2026, there were 107 security incidents in the crypto industry, with losses amounting to $1.18 billion, up 55% quarter-over-quarter. Of this, approximately $906.8 million in losses involved compromised vendors or development tools, known vulnerabilities that were not patched in a timely manner, and related components not being included in the latest audit scope.Hacken co-founder Andrii Matiukhin pointed out that project teams often only audit critical smart contracts, while wallets, signing systems, and third-party software may not be covered, leading investors to mistakenly believe that the project is secure as a whole. The report states that the largest loss event in Q3 was the attack on Bitget, with losses of at least $352 million, in which attackers exploited a vulnerability in a third-party security product to gain access to withdrawal infrastructure.Hacken also found that the asset security of some derivatives trading platforms and prediction markets relies on inadequate key management arrangements, but no vulnerabilities currently being exploited have been found in the relevant platforms. The company emphasized that security audits cannot replace continuous vulnerability management, and project teams still need to promptly fix known vulnerabilities and ensure that audits cover the system components that actually affect the safety of funds. (CoinDesk)
Odaily Report: According to on-chain detective Specter's monitoring, after ZachXBT disclosed that the Bitget attacker used Zcash (ZEC) to obscure stolen funds, other stolen funds have also begun flowing into ZEC, including funds from the Cryptobills Ledger incident and the $12 million Triple-A hack. Threat actors are using ZEC to move stolen funds.
Odaily reports: Cryptocurrency exchange Bitget has announced that it will cease providing services to certain users through a one-time measure. Bitget stated that user funds remain safe during the related service adjustments, and the platform will continue to operate.Affected users will receive follow-up steps, relevant deadlines, and fund withdrawal arrangements via email, in-app messages, and/or push notifications. Users who have not received official notifications from Bitget may continue to use their accounts normally.Bitget's customer support team will assist users with pending orders, withdrawals, and other account issues during the process, and reminds users to use only official channels and to beware of phishing links, impersonation accounts, and unverified information.On September 25, Bitget confirmed an unauthorized transfer and temporarily suspended withdrawals to investigate a security breach. Subsequent disclosures revealed that the incident involved approximately $388 million in stolen assets. (Cointelegraph)
据 Cointelegraph 报道，安全公司 Hacken 发布 2026 年 Q3 报告显示，第三季度加密货币黑客攻击事件共 107 起，总损失达 11.8 亿美元，为 2025 年 Q1 Bybit 事件（损失 16 亿美元）以来最严重的季度。 其中 77%（约 9.06 亿美元）损失源于第三方供应商、开发工具或未纳入安全审计的基础设施漏洞。四大主要事件分别为：Bitget 黑客攻击（3.87 亿美元）、Liquid Network 漏洞（3.2 亿美元）、Tectonic 漏洞（1.2 亿美元）及 Coldcard 固件漏洞（1.15 亿美元），合计占总损失约 80%。智能合约为最高频攻击向量，涉及 71 起事件，损失 2.28 亿美元。 在资金追回方面，约 3.87 亿美元（33%）被归还或逆转，其中"白帽黑客"归还 Liquid Network 被盗资金 2.72 亿美元，Cronos 验证者回滚 114 分钟区块链历史追回 1.11 亿美元；运营商另行垫付 4.1 亿美元补偿用户损失，但仍有约 3.84 亿美元（32%）既未追回也未获赔付。
Odaily News: Security firm Hacken disclosed that a total of 107 cryptocurrency hacking incidents were recorded in Q3 2026, with total losses amounting to $1.18 billion. Of that, approximately $906 million stemmed from compromised vendors, developer tools, disclosed but undeployed fixes, and infrastructure outside audit scope, accounting for roughly 77% of quarterly losses.Quarterly losses were mainly concentrated in four incidents: crypto trading platform Bitget suffered $387 million in losses from an attack, Liquid Network lost $320 million to exploitation, Tectonic lost $120 million to exploitation, and a Coldcard firmware vulnerability caused approximately $115 million in losses. About 80% of losses were concentrated in the above incidents, while 98 incidents resulted in losses below $10 million, with a median of $670,000.Smart contract incidents were the most common attack type, involving 71 incidents and causing $228 million in losses. Q3 was the most severe quarter for losses since Q1 2025, when a $1.4 billion loss by Bybit pushed the quarterly total to $1.6 billion.Approximately $387 million of Q3 losses were returned or reversed, accounting for about 33% of gross losses. Among these, about $272 million was returned in the Liquid Network incident; the Tectonic incident reversed approximately $111.2 million in lending impact by rolling back 114 minutes of blockchain history, and Circle and Tether also froze approximately $340,000 related to funds stolen from Bitget. Operators additionally absorbed $410 million in user losses, leaving approximately $384 million still not returned or covered. (Cointelegraph)
Bitget announced it will gradually resume normal operations following a fund loss incident of approximately $388 million. Its protected Operations Protection Fund absorbed the financial impact of the loss, though the cause of the attack has not yet been fully determined.
Odaily reports: A wallet linked to the $387.5 million Bitget exploit transferred 2,746 ZEC into Zcash's Ironwood privacy pool on Wednesday across three transactions, worth approximately $3.9 million.The funds account for roughly 15% of the ZEC stolen on September 24. The Ironwood privacy pool can conceal the sender, recipient, and transfer amount, but investigators may still be able to trace the path of funds returning to public addresses through transaction timing and amounts. (CoinDesk)
链上侦探 ZachXBT 发文表示，Bitget 被盗事件中疑似朝鲜关联的攻击者已开始将约 2700 枚 ZEC（约 380 万美元）转入 Zcash 的 Ironwood 屏蔽池。Bitget 热钱包此前共被盗约 1.89 万枚 ZEC，价值约 2830 万美元。
Odaily News: Cosine disclosed the interim investigation reports by SlowMist and Google Cloud's Mandiant on the Bitget hot wallet breach. Both reports indicate that the attackers first compromised systems related to third-party security products, then moved laterally into Bitget's wallet business environment.SlowMist's investigation revealed that one of the third-party security product nodes had a zero-day vulnerability, with related malicious activity traced back to as early as August 31. On September 25, the attackers also used an internal employee identity to access the management platform of another third-party security product and used highly customized withdrawal tools to interact with the wallet system's withdrawal logic. Mandiant stated that after gaining persistent access through third-party security devices, the attackers moved laterally to production wallet task servers and deployed malicious programs.Mandiant also stated that no evidence of Bitget private key leakage has been found so far, and cold wallets were not affected. Both security teams are continuing to investigate the specific intrusion paths the attackers took between the relevant systems.
Odaily reports: Bitget stated on X platform that an investigation by Google Cloud's Mandiant into Bitget's September 24 security incident found that attackers gained unauthorized access to certain third-party security devices, then laterally moved into Bitget's exchange wallet environment and obtained access to both warm and hot wallets. The investigation findings are consistent with the attack path previously disclosed by Bitget.