On-chain monitor Specter flagged a coordinated drain across more than 600 wallets suspected to be linked to GoMining on September 4, 2026, with combined losses of about $2.8 million. Attackers swapped and bridged the stolen assets across multiple chains before consolidating them into roughly 1,147 ETH on the Ethereum blockchain, while Bitget has since paused deposits and withdrawals for GOMINING-ETH.
A single service wallet tagged on-chain as GoMining lost approximately $2.79 million, nearly the entire haul in one hit. The remaining losses spread across more than 600 other addresses, most of which shared a prior history of holding GMT, the platform's native token for mining allocation and ecosystem access. That shared token history is what led Specter to cluster the wallets together, though holding GMT alone does not confirm platform affiliation for every address.
A Tagged Wallet, 600+ Addresses, One Exit Route
The suspected theft address, 0xa73…4704, was flagged by CoinGabbar as the destination point of the initial drain. Once the wallets were emptied, the attacker followed a pattern now familiar in 2026's cluster exploits, swapping tokens across assets and bridging them across multiple networks. The stolen funds then settled as roughly 1,147 ETH. Cross-chain movement of this kind is designed to slow tracing, though on-chain analytics firms like Specter can often still follow the trail as it consolidates.
Bitget Pauses Withdrawals as GoMining Stays Silent
Bitget suspended GOMINING-ETH deposits and withdrawals, announced on September 5, 2026, at 07:28 UTC+8. According to Bitget: it cited "wallet maintenance" for the suspension. A GoMining ambassador account separately noted on X that withdrawals were blocked and that GMT had sold off, arguing the platform was large enough to absorb the hit — community color, not official guidance.
Until GoMining issues a statement, markets are pricing this as unconfirmed operational risk, not a proven protocol exploit. The incident follows a wider 2026 pattern: earlier this year a mystery exploit drained hundreds of EVM wallets in a similarly coordinated sweep, and Humanity Protocol suffered a private-key compromise that triggered a sharp token crash. In each case, fast multi-chain consolidation into ETH was the attacker's exit route — the same playbook visible here.
Source: CoinGape
Trading involves risk.
Risk Disclaimer
