Bitget Hack Loss Hits $388M After Security Flaw
The Bitget hack exposed a vulnerability in a third-party security product, allowing attackers to obtain high-level internal credentials and issue fraudulent withdrawal commands. The exchange detected unauthorised transfers from several hot wallets on 24 September and initially estimated losses at $351.6 million. It later revised the figure to about $387.5 million, including transfers involving ETH, Zcash and TRON.
Bitget said its private keys and cold wallets were not compromised. Withdrawals were temporarily suspended while the exchange fixed the flaw and strengthened access controls, independent withdrawal verification and anomaly monitoring. The Bitget hack investigation involves Mandiant and SlowMist, while some stolen assets have reportedly been frozen. Bitget has not disclosed the amount recovered and is offering a 5% recovery reward.
The exchange asked THORChain to restrict movement of the related funds, although the decentralised protocol cannot selectively blacklist addresses. Bitget cited preliminary similarities to North Korean hacking methods, but attribution remains unconfirmed. The exchange’s protection fund, valued at more than $464 million, is intended to cover potential losses.
Bearish
The direct short-term impact is bearish for the assets involved because a nearly $388 million exchange theft can increase selling pressure, raise concerns about funds being liquidated and weaken trader confidence in exchange-held assets. ETH is particularly exposed because a large portion of the traced funds involved ETH. Zcash and TRON could also face temporary liquidity and sentiment pressure if stolen tokens are moved or sold.
The suspension of withdrawals may intensify market anxiety and widen spreads on the affected platform. However, Bitget said its private keys and cold wallets were not compromised, the vulnerability has been fixed, and some assets have been frozen. These measures could limit further contagion. Over the longer term, the protection fund, industry cooperation and independent forensic investigation may help stabilise sentiment, but the unresolved recovery amount and unconfirmed attribution remain risks. Overall, the security breach is more likely to create negative short-term price pressure than a sustained market-wide decline.