{
  "id": 9663686,
  "title": "Bitget CEO suspects North Korea behind $352M hack, citing IP clues",
  "url": "https://urgent.news/2026/09/25/bitget-ceo-suspects-north-korea-behind-352m-hack-citing-ip-clues",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-25T00:32:46.000Z",
  "source": {
    "name": "Cointelegraph",
    "slug": "cointelegraph",
    "url": "https://cointelegraph.com/news/bitget-ceo-suspects-north-korea-behind-352m-hack-citing-ip-clues"
  },
  "original_language": "en",
  "account": "Bitget CEO Gracy Chen suspects North Korean hackers may be responsible for the exchange's $351.6 million security breach, citing IP address clues pointing to a DPRK hacking group. During a live Q&A on X, Chen pointed to similarities with previous North Korean attacks. The CEO ruled out the possibility of an insider job, stating that investigators had identified IP addresses matching the VPN choices used by the DPRK group. Chen also revealed that the hackers directly transferred funds from Bitget's systems, rather than forging user withdrawal requests or stealing cold or hot wallets. The breach, which occurred on Thursday, remains under investigation as Bitget works to determine the extent of compromised systems and the method of attack. Some stolen funds have reportedly been recovered, though the exact amount remains undisclosed. The CEO emphasized that Bitget is collaborating with blockchain foundations and other partners on recovery efforts.",
  "summary": "Bitget CEO Gracy Chen said a preliminary investigation found IP addresses matching VPN choices associated with a DPRK hacking group.",
  "key_points": [
    "Bitget CEO Gracy Chen suspects North Korean hackers caused $351.6M security breach.",
    "IP addresses matched VPN choices used by DPRK hacking group, ruling out insider job.",
    "Funds directly transferred from Bitget systems, recovery efforts underway with partners."
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}