Major exchange patch fixes hot wallet vulnerability

10 November 2026

Bitget, a major centralized exchange, has patched a zero-day vulnerability following a $388 million hack that drained its hot wallets. On September 24, 2026, the exchange confirmed that approximately $351.6 million in unauthorized transfers had occurred from its hot and warm wallet layers, which are used for day-to-day operations, while offline cold wallets remained intact.

What Happened

The affected funds were held in hot and warm wallets, which are connected to the internet for quick access and trading activity. In a statement, Bitget confirmed that private keys and cold wallets were not compromised in this incident. The exchange noted that the vulnerability has now been fixed, with no further unauthorized transfers detected.

The Technical Angle

While the exact technical details of the vulnerability are not fully known, Bitget's response suggests that the issue lies in the wallet software or the operational signing system, rather than the blockchain itself. This incident highlights the risks associated with hot and warm wallets, which are designed for liquidity but are more susceptible to attacks compared to offline cold storage.

Security Context

This incident comes amid a string of recent high-profile attacks on centralized exchanges. In October 2026, NEAR Protocol suffered a $3.8 million exploit on BNB Chain due to a smart-contract flaw. Similarly, Binance disclosed a $6.5 million heist involving unauthorized access to an internal wallet signing service, which prompted them to rebuild the affected system and revoke engineers' credentials.

Upbit, another major exchange, took proactive measures in November 2025 when its engineers discovered a weakness in the wallet software that could have allowed attackers to infer private keys from public blockchain data. However, Upbit has not confirmed whether this particular vulnerability was exploited in any successful attacks.

Market and User Impact

Bitget has not disclosed whether the breach affected deposits, withdrawals, or reimbursements for users. However, the prevalence of such attacks underscores the importance of security measures and user education in the cryptocurrency space. As more users entrust their assets to centralized exchanges, the scrutiny on these platforms' security protocols continues to intensify.

In response to these incidents, exchanges are increasingly adopting layered security systems, including traditional security measures and new technologies like multi-sig authentication, hardware security modules (HSMs), and advanced threat detection systems.

The recent high-profile attacks on centralized exchanges, including Bitget and others, underscore the critical need for robust security measures in the rapidly evolving cryptocurrency landscape. As exchanges continue to patch vulnerabilities and enhance their security protocols, the focus on protecting user assets and maintaining trust in the industry remains paramount.