Bitget to Resume Withdrawals From September 28 After $387.5M Security Incident

Highlights:

• Bitget will resume withdrawals from September 28 after fixing the vulnerability behind its $387.5 million security incident.
• Bitcoin withdrawals will return first, followed by Ethereum, USDT, other tokens, fiat services and peer-to-peer trading.
• Circle and Tether froze about $318,000 linked to the attacker as Bitget continues tracing stolen funds.

Crypto exchange Bitget will begin restoring withdrawals on September 28 after temporarily suspending the service following a security incident that affected several hot wallets. The exchange said it has identified and fixed the vulnerability behind the incident, but additional security checks are still underway before withdrawals fully resume.

In a September 26 update, Bitget published a phased withdrawal schedule covering Bitcoin, Ethereum, stablecoins and other supported assets. The exchange said trading and deposits continue to operate normally, while users do not need to take any action before withdrawals reopen.

Bitget will begin resuming withdrawals in orderly phases following the security incident identified on September 24.

The vulnerability involved in the incident has been identified and remediated.

Bitget's security and technical teams have since been conducting additional… https://t.co/VZu59GnLAN

— Bitget (@bitget) September 26, 2026

Bitget Sets Phased Withdrawal Schedule

Bitget will resume Bitcoin withdrawals first on September 28 at 8:00 UTC. The exchange will reopen Ethereum withdrawals on September 29 across Ethereum, BNB Smart Chain, Arbitrum, Base and Optimism. It will then restore USDT withdrawals on September 30 through Ethereum, BNB Smart Chain, Solana and Tron.

Bitget will bring back withdrawals for other tokens, along with fiat and peer-to-peer services, on October 2 at 8:00 UTC. The phased rollout gives its security and technical teams more time to complete final checks on the withdrawal system. Mandiant and SlowMist are also helping Bitget investigate the incident. The company said it paused withdrawals as a security measure, not because of issues with customer asset availability.

Security Incident Involved About $387.5 Million

Bitget previously said approximately $387.5 million worth of assets were transferred to attacker-controlled addresses during the September 24 security incident. The revised figure includes transactions involving Zcash and Tron that the exchange did not count in its initial estimate. Bitget stressed that the higher figure does not represent additional unauthorized transfers after the incident was contained.

Affected assets include ETH, XRP, ZEC, BNB, AVAX, TRX, USDT, USDC,  XAUt and USDT0. The transfers occurred across Ethereum and other EVM-compatible networks, XRP Ledger, Zcash and Tron. According to Bitget, no further unauthorized transfers are possible after remediation of the identified vulnerability. The exchange also said user account balances remain unaffected and its Protection Fund will cover the financial impact of the incident.

Bitget Continues Recovery and Asset Tracing

Bitget has also launched a Recovery Bounty Program to encourage exchanges, blockchain projects, security researchers and onchain investigators to help freeze and recover stolen assets. CEO Gracy Chen said the exchange will offer a 5% bounty for freezing attacker-controlled funds and another 5% for successful recoveries.

Circle and Tether have already frozen about $318,000 in USDT and USDC held in a wallet linked to the Bitget attacker. Meanwhile, Bitget continues to investigate the incident and trace the stolen assets onchain.

Thank you to Circle and Tether for moving quickly. Every address frozen matters.

To the broader community: Bitget's Recovery Bounty Program is live — 5% for freezing attacker funds, 5% for recovery. Every exchange, security researcher, and onchain investigator can make a… https://t.co/UrFjceBL49

— Gracy Chen @Bitget (@GracyBitget) September 26, 2026

Binance is also supporting Bitget’s recovery efforts. CEO Richard Teng said on September 25 that Binance’s security team has been working with Bitget since the incident came to light. The team is sharing intelligence, tracing the movement of stolen funds and assisting with recovery efforts.