Bitget's September 2026 hack
Where it stands now. Bitget reopened withdrawals in stages from 28 September after the 24 September theft, and says its protection fund is back above $300 million.
The record 2 developments
Bitget reopens withdrawals in stages after September 24 hack
What happened. Bitget reopened Bitcoin withdrawals on 28 September at 08:00 UTC, with ETH set for 29 September, USDT for 30 September, and other tokens, fiat and P2P for 2 October, after a theft on 24 September that outlets put at $351.6 million to $388 million. Siam Blockchain reported $463 million in net outflows in the 24 hours after withdrawals reopened. Bitget said its protection fund was back above $300 million and reported a 131% reserve ratio across 19 assets.
Why it matters. Bitget said the attacker used a flaw in a third-party security software vendor, and its CEO said most of the funds are not expected to be recovered; Siam Blockchain reported $1.1 million frozen or recovered. Chainalysis linked the theft to North Korea and said it brings North Korea-linked crypto theft in 2026 to over $1 billion, according to Blogtienao.
- Bitget said the attacker used login credentials taken through the vendor's flaw to send false withdrawal orders; private keys were not exposed and cold wallets were untouched.
- Security firms Mandiant and SlowMist are investigating, and Bitget has published the attacker's wallet addresses.
- In the first hour after Bitcoin withdrawals reopened, Bitget processed 9,585 withdrawals, about 4,098 BTC in total.
Read the originals (18), usually in their own language
- Bitget Begins Phased Withdrawal Resumption After $388 Million Security Incident · BitPinas
- Bitget Replenishes Emergency Protection Fund to $300 Million Following Breach · BitPinas
- Bitget Reports 131% Reserve Ratio in First Proof of Reserves Snapshot Following $388 Million Incident · BitPinas
- Behind Bitget's $351 Million Hack: Supply Chain Attacks Resurface, Some Tactics Suspected to Be From North Korean Hacker Group Lazarus · TechFlow
- Bitget will resume withdrawals in phases, the vulnerability has been fixed, and user assets are unaffected. · TechFlow
- Bitget resumes withdrawals in phases; CEO reveals hackers exploited a zero-day in a third-party security product · ABMedia, headline translated by us
- Cross-chain platform blocks over $50 million in Bitget hacker laundering · ABMedia, headline translated by us
- Bitget unauthorized outflow: withdrawals resuming in stages | BTC resumed, ETH on the 29th · Crypto Times, headline translated by us
- Bitget's stolen funds move to privacy coin; a desperate measure as laundering routes close? · Crypto Times, headline translated by us
- THORChain refuses to block $387 million Bitget hack funds despite earning fees each time · Siam Blockchain, headline translated by us
- Bitget sees over $460 million outflow in 24 hours after hack and reopening withdrawals · Siam Blockchain, headline translated by us
- Bitget CEO not confident of recovering $388 million hack funds, citing Bybit's low recovery · Siam Blockchain, headline translated by us
- Bitget refills user protection fund to over $300 million after $388 million hack · Siam Blockchain, headline translated by us
- North Korean hackers move 2,700 ZEC stolen from Bitget into shielded pool · Siam Blockchain, headline translated by us
- SlowMist traces Bitget hack, finds activity through a zero-day flaw since August · Siam Blockchain, headline translated by us
- Bitget CEO laments after recovering only $1.1 million of the $388 million hacked · Siam Blockchain, headline translated by us
- Bitget hack update: XRP, Bitcoin and the North Korea link · BeInCrypto Thailand, headline translated by us
- Bitget hack: XRP, Bitcoin and traces linked to North Korea revealed · Blogtienao, headline translated by us
Bitget pauses withdrawals after a hot-wallet breach
Bitget paused withdrawals and on-chain trading after about $351.6 million was taken from its hot wallets on 24 September at 18:31 UTC, BitPinas reported. The exchange said the losses fall within its user protection fund of over $464 million.