Bitget Security Breach Exposure Rises to $388M

Published: 2026-09-25 17:30:14 |

Bitget’s security breach exposure has risen to about $387.5 million, up from an initial estimate of $351.6 million. The exchange said on-chain tracing identified transfers to attacker-controlled addresses, including previously omitted Zcash and TRON transactions. It said the revised figure does not reflect new unauthorised activity. The Bitget security breach affected hot and warm wallets across Ethereum Virtual Machine networks, the XRP Ledger, Zcash and TRON. Reported assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX. Bitget said cold wallets remained secure, the vulnerability was fixed and no further unauthorised transfers occurred. Withdrawals remain suspended, while deposits and regular trading continue. Bitget plans to provide a withdrawal-restoration update by 26 September at 04:00 UTC. The exchange has launched a recovery bounty offering rewards for help freezing or recovering funds, and said some assets have already been frozen. Mandiant and SlowMist are continuing forensic and on-chain investigations. Bitget said its more than $464 million User Protection Fund covers the initial estimate and that customer balances remain protected. The final loss figure may change as investigators classify more transactions. The incident is among the largest crypto exchange breaches, but remains below the roughly $1.5 billion Bybit Ether theft in February 2025. The update did not confirm earlier speculation about possible North Korean involvement.

Bearish

The Bitget security breach is bearish for the affected assets in the short term because a large volume of XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX was transferred to attacker-controlled addresses. Concerns about forced sales, asset freezes, counterparty risk and the continued suspension of withdrawals could increase volatility and weaken trader confidence, particularly in tokens directly linked to the reported transfers. The revised figure does not indicate a second attack, which limits the risk of an additional immediate shock. Bitget’s claim that the vulnerability has been fixed, its user protection fund, ongoing asset freezes and recovery efforts could reduce longer-term damage if customer balances remain fully protected and withdrawals resume as planned. However, the final loss figure is not yet confirmed, and continued forensic investigations may prolong uncertainty. Overall, the direct market effect is more likely to be negative than positive until withdrawals are restored and the recovery outcome becomes clearer.