Bitget has begun the phased restoration of withdrawal services following a security incident detected on September 24. Bitcoin withdrawals on the Bitcoin and BSC networks resumed at 08:00 UTC on September 28, as previously communicated. The exchange confirmed that approximately $388 million in assets were transferred out during the incident, based on the latest reconciliation and classification of transactions. This figure does not include any unauthorized transfers after containment.
Incident Response and Investigation
This was the first security breach of its kind in Bitget's eight-year operating history. The vulnerability has been remediated, and the incident remains contained, with no further unauthorized transfers identified. User account balances remain unaffected. Bitget CEO Gracy Chen addressed the incident and next steps during a live AMA earlier today.
Independent forensic investigators Mandiant and SlowMist are supporting the review of attack vectors, validating containment measures, and assisting with asset tracking. Bitget is also cooperating with law enforcement, exchanges, blockchain projects, and on-chain security specialists to trace and recover affected funds. Some assets have already been frozen through industry coordination. The exchange has published identified attacker addresses and tracing data to facilitate collaboration.
Withdrawal Resumption Timeline
Following the resumption of BTC withdrawals, ETH withdrawals are scheduled for September 29, USDT for September 30, and other supported tokens, fiat, and P2P services by October 2. As of 09:00 UTC on September 28, Bitget had processed 9,585 BTC withdrawals across the Bitcoin and BSC networks, totaling approximately 4,098 BTC.
Additional Measures and Support Programs
Bitget has introduced the limited-time Bitget Alliance Program for eligible users, running from September 28, 2026, at 10:00 UTC until October 30, 2026, at 09:00 UTC. The exchange is also running Project Stand Together for eligible PRO clients and market makers, offering temporary fee benefits and extended PRO-level protection.
Bitget expects to complete an official security report this week, which will form part of a broader review of the incident and the measures taken in response. The company plans to use the findings to strengthen its infrastructure and controls, review dependencies across its security architecture, and work with security firms and industry participants to reduce similar risks.
Security threats are expected to continue evolving alongside the digital asset industry, and Bitget's response will extend beyond remediation of the vulnerability itself. The exchange will continue to provide material updates on withdrawal restoration, the forensic investigation, and asset recovery as information is verified.
This article is for informational purposes only and does not constitute financial advice.
