💥 BREACHES & INCIDENTS
Bitget Hot Wallet Breached: Attackers Stole $351.6 Million From Hot Wallets Cryptocurrency exchange Bitget confirmed a breach of its hot wallets with approximately $351.6 million in assets stolen.
- Affects Bitget exchange customers; unauthorized transfers hit parts of its hot and warm wallet infrastructure, detected at 18:31 UTC on September 24, 2026.
- Cold wallets remained secure and customer balances are accurate; stolen assets include ETH, BNB, AVAX, USDT, and USDC.
- Attackers transferred assets directly after gaining system access rather than via fraudulent withdrawal requests; private keys were reportedly not obtained, and investigators suspect a compromised backend component, possibly via a third-party tool or supply-chain attack.
- Preliminary evidence includes VPN infrastructure IPs and patterns associated with North Korean actors, raising suspicion of Lazarus Group, though attribution is unconfirmed.
- Bitget suspended withdrawals, flagged recipient addresses, notified law enforcement, and says losses are covered by its $464 million User Protection Fund. 📄 Source: bitget.com · 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News, cryptika.com (discovered)
Hackers Exploit Payy Network's Ethereum Bridge Contract, Draining Its Full Balance Attackers exploited Payy Network's Ethereum bridge contract and drained its entire balance, forcing the stablecoin payments platform to suspend all network and wallet functions.
- Affects Payy Network and Payy Wallet users whose non-custodial deposits were held in the Ethereum-side bridge contract supporting transfers between Ethereum and Payy Network.
- The bridge contract was exploited at approximately 4:21 UTC on September 24, 2026, and drained of its full balance; the vulnerability type, stolen amount, and attacker addresses have not been disclosed.
- Following the exploit, Payy paused all transactions including deposits, withdrawals, transfers, and card transactions, and suspended Payy Wallet functionality while investigating.
- Payy has notified law enforcement, cryptocurrency exchanges, and blockchain analytics firms about the attacker addresses to help trace the stolen funds. 📄 Source: x.com · 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News, cryptika.com (discovered)
🕵️ RESEARCH & DEEP DIVES
- Major vulnerability found in ancient TACACS+ networking protocol A major vulnerability has been discovered in the decades-old TACACS+ networking protocol.
- Applies to organizations using TACACS+, a legacy protocol for network device authentication and authorization
- A major vulnerability in the protocol itself has been reported
- Details of the flaw and affected implementations were covered in Risky Bulletin's September 25, 2026 episode 📎 Coverage: risky.biz · 👁 via Risky Business News