Bitget confirms a major hack impacting hot wallets, leading to significant unauthorized transfers.
In a shocking development for the cryptocurrency community, Bitget acknowledged that it experienced unauthorized transfers from its hot wallets on September 24, 2026. The exchange's CEO, Gracy Chen, announced that their security system detected abnormal transactions beginning at 18:31 UTC. Initial estimates report approximately $351.6 million in affected funds, raising concern about the security measures in place at one of the prominent crypto exchanges.
While withdrawals have been paused as a precaution, trading and deposits are reportedly still functioning normally. Officials assured users that cold wallets are secure and that their balances have not been altered. The user protection fund of over $464 million is expected to cover the identified losses.
The severity of this breach has captured the attention of crypto analysts and enthusiasts alike. Before Bitget's official announcement, on-chain data revealed wallets linked to Bitget transferring between $178 million to $190 million to newly created address markets. This discrepancy between estimated losses, with Bitget claiming $351.6 million while on-chain totals hover around $180 million, points to the complexities of tracking crypto assets on the blockchain.
The troubling timeline surrounding the Bitget hack underscores the rapid nature of events in the cryptocurrency world. The on-chain tracking service, Unchained, listed the visible outflow from the affected wallets between 18:31 and 20:55 UTC on September 24. During this window, one newly created address consolidated approximately 19.67 million USDT from a Bitget hot wallet. Following this, it executed a swap of this stablecoin for around 7,111 ETH using platforms like UniswapX and 1inch Fusion.
Many within the crypto community began monitoring the situation closely. Analyst DCF GOD was among the first to flag this concerning swap activity, highlighting that stablecoins had moved swiftly for conversion to ETH—thereby complicating interception efforts by authorities and stakeholders.
After the initial swap, addresses labeled as Bitget proceeded to transfer various assets, such as ETH, USDT, USDC, AVAX, BNB, and XAUT to a new address that was later tagged as "Bitget Exploiter 1" by blockchain analysis platform Etherscan. The transaction patterns revealed that these funds were dispersed to additional addresses, which were then observed utilizing cross-chain bridges for further obfuscation.
By around 20:24 UTC, notable analyst Emmett Gallic from Arkham Intelligence provided preliminary estimates of approximately $178 million exposed, which was updated shortly thereafter to $183 million as more information came to light. Interestingly, he noted that this breach involved three hot-wallet and one cold wallet labeled addresses, although labels can sometimes misrepresent the nature of the wallet classification.
At 21:30 UTC, Gracy Chen took to social media to release a full security alert regarding the breach, reiterating the $351.6 million impact and emphasizing that only a portion of their hot and warm wallets were affected. In this communication, it was confirmed that user balances would remain intact and while withdrawals were halted, users could continue engaging in trading activities.
Quickly after the incident was detected, Bitget activated its emergency response team, tagging suspicious addresses and receiving assistance from law enforcement as well as on-chain security firms. They pledged to investigate the attack's methods thoroughly before drawing any conclusions about its origin. Updates regarding the situation were promised to be posted hourly through official communication channels.
If confirmed, the $351.6 million loss would mark one of the largest thefts in the history of centralized exchanges, although it would still fall short of the infamous February 2025 Bybit hack, where approximately 400,000 ETH was stolen—representing a loss valued at around $1.4–1.5 billion at the time.
Following the Bybit theft, Bitget had established itself as a supportive player in the crypto space, even aiding Bybit by providing 40,000 ETH—worth around $105–106 million at that time—to absorb the shock of their own hack. Interestingly, this loan was issued without any formal contract, showcasing the cooperative spirit that can be found among cryptocurrency exchanges during challenging times.
Analyzing previous exchange hacks such as Coincheck in 2018, which resulted in approximately $530 million in losses, and KuCoin in 2020, accounting for about $280 million, reveals a common thread: a significant cause is often related to the compromise of hot-wallet private keys or their signing authority. It’s critical for exchanges like Bitget to assess their vulnerabilities and continue improving security protocols.
As of now, ongoing investigations aim to uncover the specifics of the attack method—be it through private key breaches or vulnerabilities in their interface. The Bitget team remains committed to transparency as they work toward preserving the trust of their user base.
The cryptocurrency ecosystem is no stranger to security threats, and the Bitget hack serves as a stark reminder for both users and exchanges. Lessons learned from past incidents can serve as a blueprint for improving security measures. As the industry matures, users are advised to exercise caution and stay informed regarding any potential vulnerabilities related to their exchanges.
Once the full impact of the Bitget incident is clarified in the forthcoming report, stakeholders will undoubtedly assess the situation’s ramifications on user trust, exchange efficiency, and overall market sentiment. For now, Bitget promises to uphold its commitment to user security while seeking to rectify the vulnerabilities that have been exposed.
What caused the Bitget hack?
While the investigation is ongoing, it’s suspected that the attack may involve compromised private keys or vulnerabilities in the wallet interface, common factors in many crypto exchange hacks.
How much money was involved in the Bitget breach?
The reported loss currently stands at approximately $351.6 million, according to Bitget’s internal accounting.
What measures is Bitget taking in response to the hack?
Bitget has initiated an emergency response, paused withdrawals, and pledged to provide hourly updates. They also have a user protection fund to cover losses.