Summary
- Security Breach: Bitget detected unauthorized transfers from hot/warm wallets on September 24, 2026 (18:31 UTC).
- Impacted Amount: Approximately $351.6 million in cryptocurrency funds were affected.
- Cold Wallets Safe: Bitget confirmed cold wallet infrastructure remains completely secure.
- User Funds Covered: Losses are fully covered by Bitget's $464M+ User Protection Fund.
- Service Status: Withdrawals were temporarily paused for security review, while deposits and trading remained active.
- Next Steps: Bitget activated emergency protocols, notified law enforcement/security firms, and promised a full root-cause report within 24 hours.
Source: Twitter post
What happened at Bitget?
- Bitget detected unauthorized transfers from some hot wallets at 18:31 UTC on September 24, 2026.
- The exchange estimates that approximately $351.6 million in funds were affected.
- Bitget says its cold wallets remain secure and that the incident involved only part of its hot and warm wallet layers.
- Withdrawals were temporarily suspended while Bitget conducted a security review.
- Deposits and trading remained operational under Bitget’s official notice.
- Bitget says the estimated loss falls within its User Protection Fund, which held more than $464 million.
What did Bitget confirm about the hack?
Bitget confirmed unauthorized transfers from some of its hot wallets, with approximately $351.6 million in funds affected. The exchange said it's security systems detected the transfers at 18:31 UTC on September 24 and that its emergency response protocols were activated immediately.
Bitget described the incident as affecting part of its hot and warm wallet layers. The exchange operates a three-tier wallet architecture and said its cold wallets remain fully secure.
Key distinction: Bitget’s official notice states that approximately $351.6 million was affected. It does not publicly identify the attack vector in that notice and says it will not speculate while the investigation continues.
Are Bitget user funds safe?
Bitget says user funds are safe, account balances are accurate and customer assets are protected. The exchange also said the estimated amount involved falls within the coverage of its User Protection Fund, which it reported held more than $464 million at the time of the notice.
These statements describe Bitget’s position during the ongoing security review. The official announcement does not provide a completed root-cause analysis or a final incident report. Bitget said that a full report covering the root cause and corrective actions would be published within 24 hours.
What remains unconfirmed: Bitget has not stated the specific method used to gain access to the affected wallet infrastructure. Until the company publishes its incident report, claims about the attack vector should be treated as unverified.
Why did Bitget suspend withdrawals?
Bitget suspended withdrawals as a precaution while its security team reviewed the incident. The exchange said the suspension was intended to support the security review and that withdrawals would be restored once the review was complete.
Bitget’s separate withdrawal suspension notice lists the incident time as September 24 at 18:31 UTC and identifies withdrawals as temporarily unavailable. The notice says deposits and trading remained fully operational and that official updates would be provided hourly.
| Service | Status in Bitget’s official notice |
|---|---|
| Deposits | Fully operational |
| Trading | Fully operational |
| Withdrawals | Temporarily suspended during the security review |
What actions has Bitget taken?
Bitget says it activated an emergency response team, identified and flagged abnormal transfer addresses, and notified law enforcement and on-chain security firms. The exchange has not published a final explanation of how the unauthorized transfers occurred.
- Emergency response protocols were activated within minutes of detection.
- Abnormal transfer addresses were identified, flagged and reported.
- Law enforcement and on-chain security firms were formally notified.
- Withdrawals were paused as a precautionary measure.
- Bitget committed to hourly updates through its official channels.
What should Bitget users do now?
Users should rely on Bitget’s official announcements and avoid acting on unverified messages about the incident. While withdrawals are suspended, users should monitor their account notices and Bitget’s official communication channels for restoration updates.
Bitget has not instructed users to provide private keys, seed phrases or payments to recover funds. Users should be cautious of phishing attempts, fake support accounts and messages promising priority access to withdrawals.
Warning: Never share a:
- Private key
- Seed phrase, password or authentication code with anyone claiming to represent Bitget.
What happens next in the Bitget investigation?
The next formal milestone is Bitget’s promised incident report. The exchange said the report would include its root-cause analysis and corrective measures. Until that report is published, the reason for the unauthorized transfers and the full technical impact remain unconfirmed.
Bitget also said it would restore withdrawals after completing its security review. The official withdrawal notice did not provide a specific restoration time, so users should not rely on an unofficial deadline or assume that withdrawals have reopened until Bitget confirms it through an official channel.
Frequently Asked Questions (FAQs)
Q: How much did Bitget say was affected?
Bitget estimated that approximately $351.6 million in funds were affected by unauthorized transfers from some hot wallets.
Q: Were Bitget cold wallets affected?
A: Bitget said its cold wallets remained fully secure and that the incident affected only part of its hot and warm wallet layers.
Q: Are Bitget withdrawals currently available?
A: Bitget’s official withdrawal notice says withdrawals were temporarily suspended while the security review was underway. The exchange said withdrawals would be restored after the review was complete.
Q: Can users still deposit and trade on Bitget?
A: Bitget stated that deposits and trading remained fully operational during the withdrawal suspension.
Q: Has Bitget explained how the breach happened?
A: Not in the official notice reviewed for this article. Bitget said it would not speculate on the attack vector until the investigation was complete and promised a report covering the root cause and corrective actions.
Disclaimer: The information provided on this blog is for informational and educational purposes only and does not constitute financial, investment, legal, or tax advice.
