Late at night on September 24 Beijing time, two events happened almost simultaneously.
First: Bitget's hot wallet was hacked. $352 million in ETH, XRP, and USDT were drained simultaneously from seven chains.
Second: Only 9 bulk commodity ships passed through the Strait of Hormuz that day. The day before, 14 ships; the 10-day average was 18 ships. Pre-war daily throughput was 20 million barrels of crude oil.
One is the security boundary of digital assets being torn open. The other is the physical world's energy lifeline being choked.
On the same night, the market faced two thunderclaps.
The first thunderclap: Bitget's $352 million loss is not just about losing money.
The attacker did not obtain any private keys.
Bitget CEO Chen Jing said: "The attacker took over the wallet system's key backend system and deceived the authorization mechanism by forging transaction data."
To translate—hackers didn’t pick the lock; they forged the key.
Cold wallets are safe. But the phrase "cold wallet security" offers no comfort in this context because the hot wallet and backend authorization system are integrated. If you can forge one transaction to fool your own system, you can forge a second.
The XRP single-chain loss of $157.5 million is the largest single-asset loss in this incident. On-chain analyst Specter pointed out that the cross-chain path of the stolen XRP perfectly matches the method used by the TraderTraitor unit under the Lazarus Group in their previous attack on AFX Trade.
North Korean hackers. The largest crypto security incident of 2026. The cumulative loss has been revised to $387.5 million.
Bitget’s protection fund holds 5,500 BTC, about $464 million, fully covering the loss.
But money can be compensated; trust cannot.
The second thunderclap: 9 ships in the Strait of Hormuz.
Trump rejected Iran’s seven-day ceasefire proposal. A U.S. official said: "Bombing of Iran is expected to resume after the midterm elections in November."
Iran’s foreign minister said they are willing to reopen the strait within seven days. Meanwhile, senior Iranian officials said: no concessions on the nuclear program issue.
Two signals, completely contradictory.
So the market sees—traffic volume dropped to single digits, but the U.S. side claims "nearly 40 million barrels of crude oil passed through." The same event, two sets of data, differing by 40 million barrels.
Uncertainty is not about "will there be a strike." Uncertainty is "no one knows what exactly happened."
But why didn’t the market collapse?
The Fear & Greed Index is 74 today, in the greed zone. Yesterday 71, the day before also 71.
BTC is consolidating near $84,000, with less than 1% volatility in 24 hours.
The entire market liquidations total $1.054 billion, with long liquidations at $991 million. The largest single liquidation of $13.52 million occurred on Bitget’s BTCUSDT trading pair.
What was liquidated was leverage, not spot. Those who fled were direction gamblers, not coin holders.
The market classifies the Bitget incident as an "individual risk," not a "systemic risk." XRP indeed performed weaker—the asset stolen the most is under the most pressure, which is a normal reaction. But ETH and BTC held steady.
BTC at $84,000 is not unbreakable; it’s that no one dares to catch a falling knife at this level.
Hormuz’s traffic can recover. Ships can sail again, oil can flow again. But Bitget users’ trust recovery will take time.
Geopolitical risk is exogenous and can be priced. You can calculate how much oil prices will rise, how many points shipping insurance premiums will add.
Exchange security risk is endogenous and cannot be fully hedged. You can’t know in advance which backend system will be hacked next. You can’t pre-stress test "authorization mechanism being deceived."
When both risks appear simultaneously, the market’s first reaction is not to sell but to wait and see.
Waiting itself is the biggest selling pressure. Because no one buys, prices can’t rise. Because no one sells, prices can’t fall. Liquidity freezes at 84,000, everyone stands outside waiting for a signal.
Bitget’s hacker and Hormuz’s warships taught the market one thing on the same night:
Uncertainty won’t kill the bull market. But it will freeze the bull market.
$BTC$ETH$XRP#美债长端利率持续攀升，融资压力升温
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
