Bitget hacker withdraws $1.23M in ETH from Binance, consolidates funds in single wallet

Former X product lead Nikita praised: "Paid’s token fee split to celebrity X Money accounts is a highly creative solution." However, if someone does not want to be associated with a particular token, they should be allowed to opt out or disassociate. I can imagine traders harassing users to promote the product and help send spam replies. Paid’s newly launched permissionless token fee split feature to X Money accounts has sparked widespread community discussion. The official states that 80% of fees will be sent to X users via X Money, while 20% will be converted to SOL for PAID token buybacks. Creators can add an X Handle to their project’s text description to send fees via X Money. Celebrities on X do not even need to register for Paid or provide consent to receive fund distributions through X Money; some have even joked their X Money accounts are under DDoS attacks from the constant fee split deposit notifications. PAID’s official announced today that it has successfully distributed $1.44 million to X Money users via its token creator fee auto-splitting tool. According to GMGN market data, PAID’s market cap on Solana has today surged past $40 million, with a 24-hour increase of over 360% and trading volume reaching $32.8 million in the same period. BlockBeats reminds users that related tokens are highly volatile, so investment requires caution.

According to Lookonchain’s monitoring, an address suspected to belong to the Bitget hacker withdrew $1.23 million worth of tokens from Binance 11 hours ago. Wallet 0x4885 withdrew 257.6 ETH (valued at $692,000) and 545,000 USDT from Binance, then converted the 545,000 USDT into 200.2 ETH. The wallet transferred all 457.9 ETH (worth $1.23 million) to the Bitget hacker wallet address one hour ago.

Bitget’s head of its Chinese-speaking region, Xie Jiayin, posted that the crypto exchange will ensure users can withdraw funds in an orderly manner under a sufficiently secure environment. “Thank you for your patience,” he said, explaining that due to the different theft methods, the handling approach differs from other cases to absolutely rule out all potential risks. Xie also announced that he will host a continuous community live stream with Bitget CEO Gracy Chen at 3:30 PM on Monday (30 minutes before withdrawals start) to discuss the security incident and answer questions raised by the community.

Fake accounts impersonating Bank of Korea Governor Rhee Chang-yong have recently popped up on South Korean social platforms, luring followers under the pretense of "helping you understand economic trends and grasp market directions." The accounts do not openly recommend individual stocks directly, but tell users who add them as friends or send direct messages that they have study groups, guiding them to join; once inside the groups, operators claim to offer stocks with double-digit returns and demand personal information. After the Bank of Korea requested platform operators to remove the fake accounts, they were suspended within hours of surfacing, but the stock-recommendation groups that many users had already joined continued operating on Telegram. When reporters asked the group operators about their relationship with the Bank of Korea, they evaded the question, stating, "Financial institutions inherently have many internal details that are hard for outsiders to understand." Impersonating public figures to divert traffic to illegal stock-recommendation groups has become a standard tactic in investment fraud. Beyond Rhee Chang-yong, prominent South Korean financial industry figures, entertainers, and financial influencers are frequently impersonated; even official accounts of well-known investment communities and YouTube channels have been faked, and photos posted by ordinary social media users are also stolen. According to data obtained from the Financial Supervisory Service by People Power Party lawmaker Seo Il-joon, investment fraud phishing cases hit 6,769 in the first quarter of this year, with total losses of 181.7 billion won; last year, there were 11,468 such cases, amounting to 391.6 billion won in losses.

Bullish, Equiniti, Alpaca, Apex Fintech Solutions, and DriveWealth have jointly established the Issuer-Supported Token Alliance, which aims to directly link on-chain stocks to official corporate shareholder registers, enabling token holders to enjoy full shareholder rights including voting, dividends, and corporate actions. The alliance will research technical standards, settlement, custody, and interoperability between traditional financial infrastructure and blockchain, and plans to discuss practical share tokenization solutions with listed companies at the New York Stock Exchange on October 27. To date, the alliance has not launched any new tokenized stock products.

Bitget announced it will resume withdrawals in phases. The vulnerability behind the security incident has been identified and patched. The withdrawal pause was a security precaution, unrelated to user asset accessibility; account balances remain intact, and any financial losses will be covered by the platform’s protection fund. Mandiant and SlowMist continue to assist with the investigation. Trading and deposits remain operational. The withdrawal timeline (UTC+8) is as follows: BTC (Bitcoin network) at 16:00 on September 28; ETH (Ethereum, BSC, Arbitrum, Base, Optimism) at 16:00 on September 29; USDT (Ethereum, BSC, Solana, Tron) at 16:00 on September 30; other tokens, fiat currencies, and P2P services at 16:00 on October 2. Bitget stated the incident is now under control, with no further unauthorized transfers expected. Users do not need to take advance action, and the rollout will be subject to updates on the platform and official channels.