Exchange
2 incidents, 1 live. 28 days since the last new one.
2 drains in the last 12 months
2 drains in the last 12 months
1 drains in 2026
1 drains in 2025
Live
-
Critical✓Contained
Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances
Attackers exploited a zero-day in two third-party security appliances at exchange Bitget, moved on to its production wallet job server and used a custom withdrawal tool to drain hot and warm wallets on 24-25 September 2026. The confirmed loss is about $387.5 million (first reported as $351.6M) across Ethereum, Arbitrum, Avalanche, Optimism, BSC, Base and the XRP Ledger. Bitget's CEO blamed North Korean hackers, and Bitget said cold wallets and private keys were not compromised. Hacken's Q3 figures say about $387M was covered by Bitget's user protection fund.
Bitget exchange hot and warm wallets·Ethereum, Arbitrum, Avalanche, Optimism, BNB Chain, Base·$388M stolen·Since Sep 24, 2026·
Past
November 2025 1
-
Critical✓Contained
Upbit loses about $36M as Solana hot wallet is drained; Lazarus suspected
On Nov 27, 2025, South Korea's largest exchange Upbit disclosed irregular withdrawals that drained roughly $36 million in Solana-network tokens from a hot wallet. Upbit froze the affected wallets, moved remaining funds to cold storage, said cold wallets were not breached and pledged to reimburse customers in full. South Korean authorities suspect North Korea's Lazarus Group, according to Yonhap, and CertiK said it tracked over 100 exploiter addresses on Solana. How the attackers got signing access has not been explained publicly. Customers did not need to act, but should treat any 'Upbit refund' message as phishing.
Upbit exchange Solana hot wallet·Solana·$36M stolen·Since Nov 27, 2025·
No drains match these filters.