Bitget is continuing its investigation and recovery efforts following the security incident identified on September 24. Independent cybersecurity experts Mandiant and SlowMist are working with Bitget on the investigation, while our security and technical teams continue remediation and additional security checks.
Based on the latest onchain tracing and transaction classification, Bitget has confirmed assets equivalent to approximately 351.6 million. The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate. It does not reflect further unauthorized transfers. The incident remains contained and no further unauthorized transfers are possible.
The incident involved assets across Ethereum and several EVM networks, XRP Ledger, Zcash and TRON. The confirmed affected assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX.
At 18:31 UTC on September 24, 2026, Bitget’s security systems detected unauthorized transfers from some of our hot wallets. Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers. User funds are safe. The full amount of this loss falls within the coverage of Bitget’s User Protection Fund, which currently holds over $464 million.
CEO Gracy Chen said attackers compromised a critical backend system within wallet infrastructure, used it to spoof transaction data, and triggered the authorization process to move funds out. Private key compromise has been ruled out.
Withdrawals remain temporarily suspended as a precautionary measure, pending security review. Deposits and trading remain fully operational. Bitget launched a recovery bounty program offering 5% of successfully frozen or recovered stolen funds. The withdrawal plan will be announced by September 26th, 4:00AM UTC.
Law enforcement and on-chain security firms have been formally notified and are engaged.