Hot Wallet
4 incidents, 2 live. 28 days since the last new one.
4 drains in the last 12 months
4 drains in the last 12 months
3 drains in 2026
1 drains in 2025
Live
-
Critical✓Contained
Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances
Attackers exploited a zero-day in two third-party security appliances at exchange Bitget, moved on to its production wallet job server and used a custom withdrawal tool to drain hot and warm wallets on 24-25 September 2026. The confirmed loss is about $387.5 million (first reported as $351.6M) across Ethereum, Arbitrum, Avalanche, Optimism, BSC, Base and the XRP Ledger. Bitget's CEO blamed North Korean hackers, and Bitget said cold wallets and private keys were not compromised. Hacken's Q3 figures say about $387M was covered by Bitget's user protection fund.
Bitget exchange hot and warm wallets·Ethereum, Arbitrum, Avalanche, Optimism, BNB Chain, Base·$388M stolen·Since Sep 24, 2026·
-
Critical◐Partly contained
Crypto payments firm Triple-A loses $9.7M+ from hot wallets on Ethereum, Solana, TRON and TON
On Jul 24, 2026, on-chain analyst Specter flagged suspicious outflows from hot wallets of the crypto payment processor Triple-A, and PeckShield later estimated losses above $9.7 million. crypto.news lists Ethereum, Solana, TRON and TON as affected, with some reports adding Polygon and Arbitrum. The proceeds were gathered in an Ethereum address holding about 5,227 ETH. The cause had not been disclosed, and no evidence tied the breach to Triple-A's custody provider Fireblocks. Merchants and customers should rely only on Triple-A's official channels for updates.
Triple-A payment processor hot wallets·Solana, Ethereum, Tron·$9.7M stolen·Since Jul 24, 2026·
Past
September 2026 1
-
Critical✓Contained
Crypto casino Duelbits loses about $7M from hot wallets in suspected private-key compromise
On 24 September 2026 crypto casino Duelbits had hot wallets drained across Ethereum, BNB Chain, Tron, Bitcoin and Solana. Co-founder Joe called it a hack of about $7M; other estimates run from about $4.2M (Scam Sniffer, early) to about $6M (CertiK), and Rekt traced about $6.07M. Scam Sniffer and SlowMist point to a leaked private key, but Duelbits has not published a root cause. The site reopened on 27 September and said user funds were safe.
Duelbits crypto casino hot wallets·Ethereum, BNB Chain, Tron, Bitcoin, Solana·$7.0M stolen·Since Sep 24, 2026·
November 2025 1
-
Critical✓Contained
Upbit loses about $36M as Solana hot wallet is drained; Lazarus suspected
On Nov 27, 2025, South Korea's largest exchange Upbit disclosed irregular withdrawals that drained roughly $36 million in Solana-network tokens from a hot wallet. Upbit froze the affected wallets, moved remaining funds to cold storage, said cold wallets were not breached and pledged to reimburse customers in full. South Korean authorities suspect North Korea's Lazarus Group, according to Yonhap, and CertiK said it tracked over 100 exploiter addresses on Solana. How the attackers got signing access has not been explained publicly. Customers did not need to act, but should treat any 'Upbit refund' message as phishing.
Upbit exchange Solana hot wallet·Solana·$36M stolen·Since Nov 27, 2025·
No drains match these filters.