Bitcoin Magazine

Centralized Exchange and DeFi Losses Dominate 2026 Crypto Hacks Despite Hardware Wallet Failures

Crypto hacks have produced roughly $2.35 billion in net losses so far in 2026 after freezes and returns, according to a report by Lightning.news shared with Bitcoin Magazine. A security researcher by the name of Stacy Muur posted on X compiled “a list of protocols that were hacked for more than $50,000 in 2026.” 230 protocols year-to-date. “Crypto security is absolutely cooked.” September alone accounted for about $768 million in Muur’s tally, driven mainly by centralized exchanges and DeFi rather than pure Bitcoin self-custody hardware wallets, which got significant news coverage at the time.

The largest single loss was Bitget’s September 24 drain of roughly $387.5 million from hot and warm wallets. The exchange and firms including Chainalysis, Elliptic, and TRM Labs have linked the incident to North Korea, citing IP patterns consistent with prior DPRK-linked VPN use, on-chain overlaps with wallets tied to earlier Lazarus Group and TraderTraitor activity, including the 2025 Bybit theft. Attackers used third-party security products to inject fraudulent withdrawal commands without taking private keys.

Liquid Network, Blockstream’s Bitcoin sidechain, took the next-largest hit when attackers exploited an Elements software bug in early September to mint about 4,000 unbacked L-BTC and peg them out for roughly 4,000 real bitcoins, valued near $320 million at the time. The self-described white-hat actors returned 3,400 BTC after negotiations conducted on-chain via OP_RETURN messages and kept about 600 BTC. No federation keys were compromised. The loss came from a type of inflation bug on the Liquid network protocol. 

Samson Mow later called the episode part of an “avalanche of AI-assisted attacks” that had already reached other Bitcoin-adjacent software before hitting Liquid. The network is back and running now, having covered the losses, presumably from investors. 

DeFi platforms showed the same pattern of concentrated, high-value losses. Drift Protocol lost approximately $285–296 million in an April governance and multisig compromise that involved months of social engineering. An investigation commissioned by the project attributed the operation to North Korean actors. 

KelpDAO’s LayerZero-powered rsETH bridge was drained of roughly $292 million in unbacked tokens after a single-verifier design was subverted. LayerZero stated that preliminary indicators pointed to DPRK’s Lazarus Group, specifically TraderTraitor. 

Tectonic on Cronos saw about $120.4 million borrowed against manipulated collateral in late August. Validators later rewound the chain and recovered the majority, though several million dollars that had already been bridged off-network were not restored.

Incidents involving Bitcoin hardware wallets were smaller in aggregate despite the wide news coverage. Galaxy Research placed the Coinkite RNG hack values in the range of roughly 1,596–1,789 BTC, on the order of $100–130 million, with higher upper-bound estimates near 2,055 BTC. 

Ledger losses of roughly $86–102 million traced to devices sold through the authorized Southeast Asian reseller CryptoBilis, where an unauthorized hardware implant captured recovery phrases during setup, a supply chain attack. The company stated that confirmed cases were limited to that reseller’s supply chain and that its own systems and direct sales were unaffected, though there are unconfirmed reports of such bugged devices making it to German markets. Combined, however, these hardware-adjacent events remain well below the single largest CEX and DeFi incidents. 

The year has also coincided with the practical deployment of AI coding agents capable of scanning codebases for vulnerabilities and automating exploit development. Muur has stated that “AI is definitely making it much easier to find and exploit bugs. I think we’re entering a pretty serious cybersecurity arms race.” 

Reports note that code-flaw exploits accelerated after the February release of models such as GPT-5.3-Codex and Claude Opus 4.6, which showed high success rates on smart-contract bug benchmarks at low cost. 

OpenAI has disclosed internal testing cases in which agents accessed unauthorized test-network funds or bypassed controls to complete tasks. Most of the year’s largest heists still relied on traditional vectors such as key compromise, social engineering, and infrastructure flaws, but the lowered barrier for discovering and weaponizing bugs adds a new layer of risk, particularly for complex smart-contract systems and sidechains.

Bitcoin’s base layer itself has not been the source of these losses. The bulk of the 2026 damage has concentrated in CEX hot-wallet infrastructure, DeFi governance, oracle designs, and Bitcoin sidechain code, while pure self-custody hardware wallets, even when imperfect, have accounted for a distinctly smaller share. Nevertheless, calls for an update to self custody recommendations have emerged from industry leaders, pushing forward multivendor multisig wallets as the future of niche industry.

This post Centralized Exchange and DeFi Losses Dominate 2026 Crypto Hacks Despite Hardware Wallet Failures first appeared on Bitcoin Magazine and is written by Juan Galt.

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.

The post US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms appeared first on SecurityWeek.

Bitcoin Magazine

Bitget Customers Withdraw Over 4,000 Bitcoins in One Hour Following $388M Hack

Investors withdrew over 4,000 bitcoins worth over $334 million at today’s prices in one hour after hacked Bitget resumed customer withdrawals, the company’s CEO has said. 

Bitget CEO Gracy Chen told Bloomberg Television Tuesday that withdrawals from the exchange had since stabilized following the immediate bitcoin transactions.

Hackers last week made away with $388 million in crypto after targeting the Victoria, Seychelles-based exchange’s hot wallets. 

“The withdrawals actually stabilized a lot today,” Chen said. “Those hundreds of millions [in bitcoin withdrawals] actually most of them happen on the first hour of the withdrawal restart.”

In a Monday X post, Chen said that 9,585 orders of 4,098 bitcoins were processed. The exchange is allowing customers to withdraw funds in phases. 

Bitget froze withdrawals after blockchain experts flagged that money was leaving the exchange. Bitget later said the attack method in the incident was “highly consistent with known patterns of North Korean hacker organizations.” 

Chen said that no cold storage funds were touched but rather attackers had “exploited vulnerabilities from third-party products to steal internal credentials, then used those credentials to send fraudulent withdrawal commands that bypassed our risk controls.” 

She added that the company was using its own money to top up its protection fund after it dropped in size. Bloomberg reported that it was below $200 million after standing at $464 million before the hack. 

Bitget said that it was the first “security incident of this nature in eight years.” 

“The incident remains contained, and no further unauthorized transfers are possible,” the exchange noted. 

Bitget is the sixth biggest by trading volume, according to CoinGecko, processing in the past 24 hours $811 million in transactions. The exchange’s customers are mostly based in Asia. 

Attackers linked to North Korea’s government have long targeted crypto exchanges and are some of the most sophisticated cyber criminals out there. 

This post Bitget Customers Withdraw Over 4,000 Bitcoins in One Hour Following $388M Hack first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.

The U.S. and South Korea have their annual joint military drills (Ulchi Freedom Shield) from August 17-27, focusing on countering the threat from North Korea of drones and cyber-attacks. President Trump said on Sunday that he had ordered the Pentagon to “substantially reduce” joint military exercises with South Korea, according to the New York Times.

North Korea said these military exercises “are more serious, provocative and dangerous than last year.”

Although North Korea routinely criticizes these joint military exercises, this year North Korea went on to say that the U.S. is pursuing a new nuclear strategy that lowers the threshold of using nuclear weapons that pushes global security “to the brink of a nuclear war.”

North Korea’s usual response to these annual joint military exercises is the launching of short-range ballistic missiles into the Sea of Japan. This year there was no surprise when North Korea launched two ballistic missiles, saying the U.S. – South Korea drills were a “rehearsal for an aggressive war.” What was different was North Korea’s statement that the U.S. and South Korea and Japan formed a “nuclear alliance” that North Korea would respond to by building a new and higher level of nuclear deterrence.

This comes at a time when North Korea is providing Russia with combat troops, artillery shells and ballistic missiles for their war with Ukraine, while enhancing their relationship with China. The money North Korea receives from Russia is in the billions, with likely Russian assistance to North Korea’s nuclear, missile, and satellite programs.

Although North Korea has refrained from a seventh nuclear test – probably at the urging of China – they are building more nuclear weapons and ballistic missiles to deliver nuclear and conventional warheads. Recently, North Korea’s leader, Kim Jong Un, displayed to the world a new uranium enrichment facility with cascades of apparent new centrifuges to enrich uranium. This was in addition to the new uranium enrichment facility at North Korea’s nuclear complex in Yongbyon.

It was the issue of North Korea’s non-declared uranium enrichment sites that led to the failure of the 2019 Hanoi Summit. When Kim Jong Un offered to halt activities at Yongbyon, in return for the lifting of sanctions imposed on and after 2016, and President Trump responded with the request that North Korea declare “all” nuclear sites. Mr. Kim refused and that ended the Hanoi Summit.

Prior to and after the Hanoi Summit, North Korea has threatened to use tactical nuclear weapons in any conflict with South Korea. This is reminiscent of Russia’s President Vadimir Putin threat to use nuclear weapons in its invasion of and war with Ukraine. A war that North Korea joined, as an ally of Russia, with a recent Mutual Defense Treaty.

Hopefully, Ukraine will continue to receive the military support they need from the U.S. and NATO to protect its people and country from a revanchist Russian Federation that’s receiving significant military support from North Korea.

Messrs. Kim’s and Putin’s refrain of using nuclear weapons, with North Korea’s emphasis on building even more nuclear weapons, is concerning. Any use of nuclear weapons would be tragic for the world.

South Korea’s President, Lee Jae Myung, continues to reach out to North Korea, for talks that would lead to peaceful coexistence between the two Koreas. To date, North Korea’s response has been disappointing. But President Lee persists, knowing that an emboldened North Korea, now aligned with Russia, could incite conflict on the Korean Peninsula. Conflict that could cause instability on the Korean Peninsula and Northeast Asia.

Having negotiated with North Korea for over ten years, it is apparent to me that North Korea wants a normal relationship with the U.S. A relationship that would give North Korea international legitimacy and access to financial institutions.

Now would be the time for President Trump to meet with Kim Jong Un. Such a meeting would deescalate North Korea’s tension with South Korea and the U.S. It would also give the U.S. the opportunity to move in a different direction with North Korea, with the goal of getting North Korea to halt its nuclear and missile programs, in return for the easing and lifting of sanctions and a dialogue to normalize bilateral relations.

North Korea is a defacto nuclear weapons state and recognizing them as such should not be too difficult. Getting North Korea to implement a moratorium on its nuclear and weapons programs would be progress. Sanctions relief and a path to a normal relationship with the U.S. could convince Kim Jong un that a mortarium would be in North Korea’s interest, while aligning with a revanchist and fickle Vladimir Putin is not in North Korea’s interest.

Our goal should continue to be the complete and verifiable denuclearization of the Korean Peninsula, realizing that this could take years to achieve. Getting North Korea to halt its nuclear and missile programs and refraining from fomenting conflict with South Korea are immediate goals that are achievable, assuming a willingness to be flexible on sanctions relief and a dialogue on normalizing relations.

It is in the interest of world peace that the U.S. reengage with North Korea.

The author is a former Associate Director of National Intelligence. All statements of fact, opinion or analysis expressed are those of the author and do not reflect the official positions or views of the U.S. government.

The Cipher Brief is committed to publishing a range of perspectives on national security issues submitted by deeply experienced national security professionals. Opinions expressed are those of the author and do not represent the views or opinions of The Cipher Brief.

Have a perspective to share based on your experience in the national security field? Send it to Editor@thecipherbrief.com for publication consideration.

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief

The South Korean Buddhist monk, the Venerable Pomnyun Sunimin, in his book “What is Happiness?” introduces us to his philosophy of life: “Everyone born into this world has the right to be happy … and being helpful to the world and to others around us increases our own personal happiness.”

The U.S. is now ranked 24 out of the 147 countries surveyed by the Wellbeing Research Center at the University of Oxford in partnership with Gallup. Factors that contribute to this ranking include higher GDP per capita, a strong social support system, higher life expectancy, greater freedom, absence of government and corporate corruption and charitable giving. The U.S. ranking has dropped each year since 2011, with a significant decline between 2022 (ranked 15) and 2025 (ranked 24).

As a world leader, the U.S. is concerned with the world around us: With the wars in Ukraine, Iran, and Gaza and the innocent people killed; with the terrorism of October 7 and the innocent Israelis killed; armed conflicts in Sudan and Myanmar; insurgencies in Africa and Asia, and the criminal conflicts and the drug cartel violence in the Americas.

With this concern, there are understandable debates and doubts in the U.S. about a myriad of issues: the amount of aid we are providing to Ukraine, to defend itself from an invading Russia that’s receiving troops and weaponry from North Korea; efforts to peacefully negotiate a ceasefire with an Iran that says it has the right to enrich uranium and kill innocent peaceful protesters; an elusive peace in Gaza when Hamas refuses to disarm and tension in the West Bank intensifies; and a nuclear North Korea building more nuclear weapons and aligned with a revanchist Russian Federation. Helplessness with the conflicts in Sudan and Myanmar and the jihadist groups linked to Al-Qaeda and the Islamic State operating throughout Africa. Security concerns in Haiti and Ecuador due to gang violence and our inability to effectively counter the flow of illicit drugs coming into the U.S., primarily from Mexico, Columbia, and China. It’s hard to find happiness when assessing the world around us and the absence of peace.

Working with our allies and partners is an integral part of diplomacy and conflict resolution. NATO, AUKUS (Australia, the United Kingdom and the U.S.) and allies like South Korea, Japan and the Philippines are key to managing the ever-increasing security threats around the world. How we manage these relationships with our allies and partners is important.

Domestically, extreme political polarization has replaced polite political debate. A myriad of issues contribute to anxiety among the people: reported cuts to food stamps, Medicaid and social programs, with the rise in food and gas prices that receives daily media coverage. Nicolas Kristof of the New York Times reports a rise in homelessness in California, Oregon, and Hawaii and the plight of the Americans left behind. There’s extensive media coverage to rescind a planned $1.8 billion “Anti-Weaponization Fund” and whether it was vandalism or shoddy construction of the Reflecting Pool in our Nation’s capital. Indeed, there are other political and social issues, like AI, that the average informed American is exposed to daily. Following these and other foreign and domestic issues is important for an informed electorate that will be voting in November and in 2028, but are we on overload? Of concern is the extreme polarization of views on these issues and the government’s responsibility to inform and seek the public’s support on these important issues, without adding to the polemics.

The author of “What is Happiness?” tells us: “Between 1995 and 1998, about three million people died of hunger and disease in North Korea and those who survived also suffered greatly as their family members, friends and neighbors died.” Despite North Korea’s formidable nuclear and missile capabilities, there are exigent health and food issues that continue to demand attention. The U.S. previously helped with these humanitarian issues because it was the correct thing to do. Returning to talks with North Korea to halt their nuclear and missile programs, with the lifting of sanctions and no longer demanding denuclearization as a condition for talks, would be the correct thing to do. It would be a positive development for Northeast Asia and the Korean people and hopefully contribute to the eventual reunification of the Korean Peninsula.

Progress with North Korea should bring some form of happiness to the Korean people and to the people in the U.S. who cry out for a more peaceful world.

The author is a former Associate Director of National Intelligence. All statements of fact, opinion or analysis expressed are those of the author and do not reflect the official positions or views of the U.S. government.

This piece was originally published in The Washington Times and is republished here with permission.

Read more national security insights from experienced experts exclusively in The Cipher Brief.

The South Korean Buddhist monk, the Venerable Pomnyun Sunimin, in his book “What is Happiness?” introduces us to his philosophy of life: “Everyone born into this world has the right to be happy … and being helpful to the world and to others around us increases our own personal happiness.”

The U.S. is now ranked 24 out of the 147 countries surveyed by the Wellbeing Research Center at the University of Oxford in partnership with Gallup. Factors that contribute to this ranking include higher GDP per capita, a strong social support system, higher life expectancy, greater freedom, absence of government and corporate corruption and charitable giving. The U.S. ranking has dropped each year since 2011, with a significant decline between 2022 (ranked 15) and 2025 (ranked 24).

As a world leader, the U.S. is concerned with the world around us: With the wars in Ukraine, Iran, and Gaza and the innocent people killed; with the terrorism of October 7 and the innocent Israelis killed; armed conflicts in Sudan and Myanmar; insurgencies in Africa and Asia, and the criminal conflicts and the drug cartel violence in the Americas.

With this concern, there are understandable debates and doubts in the U.S. about a myriad of issues: the amount of aid we are providing to Ukraine, to defend itself from an invading Russia that’s receiving troops and weaponry from North Korea; efforts to peacefully negotiate a ceasefire with an Iran that says it has the right to enrich uranium and kill innocent peaceful protesters; an elusive peace in Gaza when Hamas refuses to disarm and tension in the West Bank intensifies; and a nuclear North Korea building more nuclear weapons and aligned with a revanchist Russian Federation. Helplessness with the conflicts in Sudan and Myanmar and the jihadist groups linked to Al-Qaeda and the Islamic State operating throughout Africa. Security concerns in Haiti and Ecuador due to gang violence and our inability to effectively counter the flow of illicit drugs coming into the U.S., primarily from Mexico, Columbia, and China. It’s hard to find happiness when assessing the world around us and the absence of peace.

Working with our allies and partners is an integral part of diplomacy and conflict resolution. NATO, AUKUS (Australia, the United Kingdom and the U.S.) and allies like South Korea, Japan and the Philippines are key to managing the ever-increasing security threats around the world. How we manage these relationships with our allies and partners is important.

Domestically, extreme political polarization has replaced polite political debate. A myriad of issues contribute to anxiety among the people: reported cuts to food stamps, Medicaid and social programs, with the rise in food and gas prices that receives daily media coverage. Nicolas Kristof of the New York Times reports a rise in homelessness in California, Oregon, and Hawaii and the plight of the Americans left behind. There’s extensive media coverage to rescind a planned $1.8 billion “Anti-Weaponization Fund” and whether it was vandalism or shoddy construction of the Reflecting Pool in our Nation’s capital. Indeed, there are other political and social issues, like AI, that the average informed American is exposed to daily. Following these and other foreign and domestic issues is important for an informed electorate that will be voting in November and in 2028, but are we on overload? Of concern is the extreme polarization of views on these issues and the government’s responsibility to inform and seek the public’s support on these important issues, without adding to the polemics.

The author of “What is Happiness?” tells us: “Between 1995 and 1998, about three million people died of hunger and disease in North Korea and those who survived also suffered greatly as their family members, friends and neighbors died.” Despite North Korea’s formidable nuclear and missile capabilities, there are exigent health and food issues that continue to demand attention. The U.S. previously helped with these humanitarian issues because it was the correct thing to do. Returning to talks with North Korea to halt their nuclear and missile programs, with the lifting of sanctions and no longer demanding denuclearization as a condition for talks, would be the correct thing to do. It would be a positive development for Northeast Asia and the Korean people and hopefully contribute to the eventual reunification of the Korean Peninsula.

Progress with North Korea should bring some form of happiness to the Korean people and to the people in the U.S. who cry out for a more peaceful world.

The author is a former Associate Director of National Intelligence. All statements of fact, opinion or analysis expressed are those of the author and do not reflect the official positions or views of the U.S. government.

Read more national security insights from experienced experts exclusively in The Cipher Brief.

North Korea is strategically closer to Russia and China than any time since the Korean War, while the U.S. does nothing to challenge the growing power of the Axis of Authoritarians (China, Russia, Iran, and North Korea). The irony is that North Korea has, since 1994, wanted a normal relationship with the U.S., yet the U.S. appears incapable of addressing the North Korean nuclear threat.

On July 19, 2026, North Korean Foreign Minister Choe Son Hui met with Russian President Vladimir Putin in Moscow and declared that North Korea “stands by Moscow until victory in the war with Ukraine is achieved. Ties with Russia are a strategic priority for Pyongyang.” I’ve worked with Ms. Choe, a fluent English speaker, from 2003 to 2016, and know she –and others – would prefer dialoguing with the U.S.

And from July 10 to 12, 2026, North Korean Premier Pak Thae Song was in Beijing meeting with Wang Huning, Chairman of the National Committee of the Chinese People’s Political Consultative Conference, the fourth highest member of the Politburo Bureau Standing Committee of the Chinese Communist Party, for the 65^th anniversary of China’s defense treaty with North Korea – The Treaty of Friendship, Cooperation and Mutual Defense.

The visit of North Korean leader Kim Jong Un to Beijing in September 2025 to meet with Chinese President Xi Jinping and participate in the Victory Day parade with Mr. Xi and Mr. Putin, followed by the June 2026, visit of Mr. Xi to North Korea for a state visit are clear indicators that North Korea is working hard to improve relations with China, while maintaining a close military relationship with Russia.

Russia reportedly is asking for another 30,000 troops and ballistic missile launchers from North Korea. The additional North Korean troops would reinforce frontline operations, doubling previous deployment estimates. This, while North Korea prepares to transfer new ballistic missile launches to Russia. The deepening military cooperation with Russia, pursuant to the 2024 mutual defense pact between Russia and North Korea, is not only a growing threat to Ukraine but, also, to the nations in Asia within range of North Korean missiles.

I have written often in this column about Norea’s growing arsenal of nuclear weapons – over 100 by 2030 – and the sophistication of their ballistic missiles, especially the long-range missiles – Hwasong 15, 17,18,19 and 20 – all capable of targeting the U.S. and their progress with short-range missiles that can target South Korea and Japan. Recently, we talked about progress with nuclear-powered submarines, but we didn’t discuss the progress North Korea is making with establishing a nuclear triad – land, sea and air-based nuclear weapons. And with Russia’s assistance, this is achievable in the not-too-distant future.

What are we doing to address this real and expanding threat? We’re watching the Axis of Authoritarian States become more united and seemingly forgetting that since 1994 North Korea wanted a normal relationship with the U.S. (The Agreed Framework); in September 2005 with the Six Party Talks Joint Statement and the historic June 2018 Singapore Summit of President Donald Trump with Chairman Kim Jong Un. Since then, and after the failed February 2019 failed Hanoi Summit and the June 2019 symbolic DMZ meeting, there were no further substantive developments with North Korea.

Since 2020, our failed policy of “strategic Patience” kicked in and we’ve seen North Korea exponentially increase its arsenal of nuclear weapons and ballistic missiles, while embracing Russia with a Mutual Defense Treaty and military assistance to Russia for its invasion of and war with Ukraine.

It’s time for the U.S., with support from its allies in South Korea and Japan, to decide if we want a normal relationship with North Korea; a relationship that will weaken the Axis of Authoritarian States, or if we want to persist with a “do-nothing” policy toward North Korea.

And if we want to do something, that means de facto recognition of North Korea as a nuclear weapons state – a reality we can’t deny – and entering into negotiators with Pyongyang to get North Korea to stop building more nuclear weapons and ballistic missiles in exchange for the lifting of sanctions, economic development assistance and a path to normal bilateral relations.

It’s time to address the North Korean nuclear threat.

The author is the former Special Envoy for Six Party Talks negotiations with North Korea (2003-2006) and the former Associate Director of National Intelligence. All statements of fact, opinion or analysis expressed are those of the author and do not reflect the official positions or views of the U.S. government.

The Cipher Brief is committed to publishing a range of perspectives on national security issues submitted by deeply experienced national security professionals. Opinions expressed are those of the author and do not represent the views or opinions of The Cipher Brief.

Have a perspective to share based on your experience in the national security field? Send it to Editor@thecipherbrief.com for publication consideration.

Read more expert-driven national security insights, perspective and analysis in The Cipher Brief