Bitget Hack Update: Loss Raised to $387.5M, Attack Method Confirmed, Withdrawals Live

Key Points Bitget hack update September 28: loss raised to $387.5M, attack method confirmed, BTC withdrawals live, THORChain dispute, $343M still in attacker wallets. ▶ Loss revised to $387.5 million and up from $351.6M and after investigators identified additional stolen…

Bitget Hack: $351M Stolen, Lazarus Group Suspected, User Funds Covered

Key Points Bitget hack: $351.6 million stolen from hot wallets on September 24, 2026. Lazarus Group suspected. User Protection Fund covers the loss. ▶ Bitget confirmed the Bitget hack on September 25, 2026: attackers drained $351.6 million from hot wallets…

A Hacker Stole $7.8M in rsETH. A Bot Named Yoink Stole It Back First and Hacker went back with $0

TL;DR ▶ On September 15, 2026, an attacker exploited a flaw in a Gnosis Safe wallet on Ethereum and attempted to drain 2,900 rsETH worth approximately $7.8 million. ▶ The attacker made one critical mistake: they broadcast the exploit transaction…

CoinEx Is Shutting Down After Nine Years. Here Is What You Need to Do Before December 22

TL;DR ▶ CoinEx founder Haipo Yang announced on September 15, 2026 that CoinEx will cease operations in an orderly wind-down. Withdrawals open until December 22, 2026. ▶ Reason: prolonged crypto market downturn, collapsing trading volumes, and compliance costs that have…

Revolut Attackers Are Now Publishing Stolen Passports and Selfies Daily Until Revolut Pays

TL;DR ▶ The attackers who obtained Revolut customer data via a fake government request on September 12 have begun publicly posting stolen passports and selfies on X and Telegram, starting September 13. ▶ Their demand: “We are going to start…

Revolut Handed Passports and Bitcoin Records to Fake Government Request. Here Is Everything We Know

TL;DR ▶ Revolut confirmed on September 12, 2026 that it disclosed passports, selfies, IBANs, and full Bitcoin transaction histories to an unauthorized third party who impersonated a government agency. ▶ The fake request used a legitimate government domain email that…

Fake IRS Letter Scam Is Targeting Crypto Holders. Here Is Exactly How It Works

WARNING If you received a physical letter claiming to be from the IRS about a “Digital Asset Compliance Portal” or “DACP”: do not scan the QR code, do not visit the website, do not call any number listed. The IRS…

Coldcard Hardware Wallet Hack: $116M in Bitcoin Stolen From 5,200 Addresses. Here Is Exactly What Happened.

URGENT: Are You Affected? If you generated a Coldcard wallet seed between March 2021 and July 2026, your seed may be compromised regardless of your current firmware version. Update firmware and migrate funds to a new seed immediately. A firmware…

BitConnect: The $2.4 Billion Crypto Fraud That Changed Everything

TL;DR ▶ BitConnect raised over $2.4 billion from investors worldwide between 2016 and 2018 promising up to 1% daily returns via a proprietary trading bot. ▶ The trading bot never existed. Returns were paid using new investor deposits. Classic Ponzi…

$763M Stolen in Q2 2026. 88% Came From Keys, Not Code. The Hacken Report Explains Why

The headline number from Hacken’s Q2 2026 Security and Compliance Report is $763,971,791 stolen across 67 incidents between April and June 2026, a 58.3% increase from Q1’s $482.7 million and the worst quarter since Q2 2025. But the headline number…