“Spoofed transaction data and triggered our authorization process” is the key sentence. The signing layer trusted what the compromised backend showed it. Same class of problem as other large exchange incidents. Positive that cold wallets and keys held. Users now just need a date, not another “as soon as confirmed.” #bitget
[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026
At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately.
What we have confirmed:
-Estimated funds affected: approximately $351.6 million
-Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers.
-User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million
Actions we have taken:
-Emergency response team activated within minutes of detection
-Abnormal transfer addresses identified, flagged, and reported
-Withdrawals temporarily suspended as a precautionary measure, pending security review
-Law enforcement and on-chain security firms have been formally notified and are engaged
What this means for you:
-Your account balances are accurate and your assets are protected
-Deposits and trading remain fully operational
Withdrawals are temporarily paused and will be restored as soon as the security review is complete
-What comes next: We will provide updates on an hourly basis across this channel and all official platforms. A full incident report — including root cause analysis and corrective actions — will be published within 24 hours. We will not speculate on the attack vector until the investigation is complete.
Bitget has navigated multiple market cycles. We will not run from this. Every dollar and every decision will be accounted for, transparently and in full.
Updates will be posted here and across all official Bitget channels as they become available.
— Gracy Chen, CEO, Bitget
Stay calm guys, since funds are already on-exchange, why not stack $BTC, $ETH or $XAUT and join Trading Club Phase 62 for a share of 35,000 $BGB.
Ends Sep 29, 15:59 UTC.
https://t.co/TRJnxJGhUH
#bitget#Phase62
Stay calm.
Bitget’s Protection Fund covers this. 5,500 BTC (~$464M), wallets public, loss is on the fund — not user balances.
Withdrawals are paused for now. Trading is still live.
If your funds are already on-exchange, you can still stack $BTC, $ETH or $XAUT and join Trading Club Phase 62 for a share of 35,000 $BGB.
Ends Sep 29, 15:59 UTC.
https://t.co/EeG6eatblQ
#bitget #Phase62
About the Bitget Protection Fund 🛡️
The Bitget Protection Fund exists for moments like this. It holds 5,500 BTC, approximately $464M at current prices.
All fund wallet addresses are public and can be verified on-chain by anyone, at any time. The fund is designated to protect user assets against platform-wide threats such as cybersecurity incidents.
Losses from this hot wallet incident after assessment will be borne by the Protection Fund. We will replenish the fund. Details and coverage terms will be announced separately.
About the Bitget Protection Fund 🛡️
The Bitget Protection Fund exists for moments like this. It holds 5,500 BTC, approximately $464M at current prices.
All fund wallet addresses are public and can be verified on-chain by anyone, at any time. The fund is designated to protect user assets against platform-wide threats such as cybersecurity incidents.
Losses from this hot wallet incident after assessment will be borne by the Protection Fund. We will replenish the fund. Details and coverage terms will be announced separately.