The hacker responsible for the Bitget breach has withdrawn $1.23 million from Binance, moving the funds to a wallet linked to the attack. This activity follows the initial incident on September 24, when unauthorized transfers reached $387.5 million from Bitget hot and warm wallets.
On-chain analysis identified five withdrawals from Binance hot wallets on September 25, including 88.35 ETH, 89.36 ETH, 79.93 ETH, and $545,000 in USDT. By September 26, the total amount of ETH forwarded to the attacker-controlled wallet reached 457.9 ETH.
Bitget and Binance are collaborating to trace the stolen assets across the Ethereum, BNB Chain, and TRON networks. Cybersecurity firms Mandiant and SlowMist, along with law enforcement, are assisting in the investigation of the breach, which involved spoofing transaction data.
The total loss estimate was revised from $351.6 million to $387.5 million. Bitget has suspended withdrawals and committed to compensating users through its User Protection Fund, which contains more than $464 million.
