Bitget Hack: $351.6M Stolen, BGB Token Holds Near $1.96

Bitget confirmed on 24 September 2026 that roughly $351.6 million was drained from its hot and warm wallets, a breach the exchange described as the possible largest crypto hack of the year. Attackers penetrated a backend wallet system and forged transfers rather than stealing private keys, and the exchange's chief executive said North Korea was highly likely responsible. Withdrawals are paused and cold wallets are secure, per the company. BGB, Bitget's native token, traded around $1.96 — only 3% to 5% below pre-hack levels. As of 03:46 UTC today, Oracle (ORCL) traded at $139.54, down 6.47%, in a $133.48-$140.34 range.

Context — why this matters now

The Bitget breach lands during a stretch of elevated digital-asset risk. It follows the pattern of exchange compromises that have repeatedly been attributed to North Korean operators, though Bitget's CEO offered no public evidentiary detail beyond the attribution itself. What distinguishes this incident is the recovery mechanism.

The exchange says a user protection fund of around $465 million, backed by around $1 billion in capital, covers the losses. That is a structural difference from a simple insolvency event: the fund size exceeds the stolen amount, which is why BGB has not collapsed the way tokens often do after a hot-wallet drain.

Macro conditions are not helping sentiment. The US 30-year Treasury yield rose to near 5.5% overnight, its highest since 2004, and the 10-year reached around 5.2% on stronger-than-expected US data and firmer bets on further Federal Reserve hikes. US mortgage rates have climbed to around 7%. When the risk-free curve steepens this aggressively, capital rotates out of speculative assets.

That backdrop makes BGB's resilience more notable, not less. A token holding within 5% of pre-hack levels while global bond yields hit multi-decade highs suggests holders are pricing the protection fund as credible, or that the float is simply too thin to reflect real selling pressure yet.

Data — what the numbers show

The headline figure is $351.6 million, the amount Bitget says was taken from hot and warm wallets. Against that, the exchange cites roughly $465 million in user protection funds and around $1 billion in backing capital — a coverage ratio above 1.3x on the stated numbers.

BGB's price tells the market's first verdict. At around $1.96, the token sits only 3% to 5% below where it traded before the breach. A move of that size is small relative to the scale of the loss, and it is the central anomaly of this event.

Comparisons from the wider tape frame the risk appetite. ORCL traded at $139.54, down 6.47% today, ranging between $133.48 and $140.34. A single software name lost more in percentage terms than a crypto exchange token did after a nine-figure hack.

The timing matters too. The breach was confirmed on 24 September 2026, and daily figures for the stolen crypto were reported in the same window.

Analysis — what it means for markets and sectors

The second-order effects run through exchange tokens and custody infrastructure. If the protection fund absorbs the loss without a shortfall, BGB's price stability becomes a template for how token holders price insured breaches — the token trades on the credibility of the backstop, not on the size of the theft. If the fund proves insufficient once withdrawals resume, that template breaks and re-prices every exchange token with a similar structure.

The exposure is concentrated. Bitget's own users hold the withdrawal risk, and BGB holders hold the reputational risk. Broader crypto market structure is affected only insofar as the incident reinforces the case for self-custody and regulated venues, a shift that benefits custodians and hurts smaller offshore exchanges.

One counter-argument deserves weight. BGB trades at $1.96 with withdrawals paused. When withdrawals resume, sellers who could not exit during the freeze will finally be able to move. The token's stability today may reflect a frozen order book rather than genuine demand, and the pre-hack price is not a reliable anchor until the gate reopens.

Positioning is therefore split. Holders who trust the $465 million fund are effectively long the exchange's balance sheet. Traders who expect a post-withdrawal rush for the exits are short the same token, betting that the 3% to 5% discount is a lagging indicator.

Outlook — what to watch next

The first catalyst is the resumption of withdrawals. No date has been given, and the exchange has not disclosed the terms or timeline for processing the backlog. The BGB price at that moment is the cleanest read on whether the protection fund is believed.

Second, watch whether the $465 million fund is actually drawn and whether the exchange discloses any shortfall. The company has not said how or when the fund would be deployed.

Third, the Trump AI meeting scheduled for Tuesday, 29 September, and the Reserve Bank of Australia decision the same day, will set the broader risk tone that crypto trades against. On levels, the pre-hack BGB price near $1.96 remains the reference point, and the 30-year Treasury yield near 5.5% is the macro pressure to track.

Frequently Asked Questions

What does the Bitget hack mean for retail investors holding BGB?

Retail holders face two separate exposures: the token price and the exchange's solvency. Bitget says its $465 million protection fund, backed by around $1 billion in capital, covers the $351.6 million loss. That coverage is the reason BGB trades near $1.96. The unresolved question is whether the fund is drawn smoothly once withdrawals resume, or whether processing delays reveal a gap between the stated fund size and available liquidity. The company has not disclosed withdrawal resumption terms.

Why did Bitget's BGB token barely move after a $351.6 million hack?

BGB fell only 3% to 5% because the stated loss is smaller than the stated protection fund. Withdrawals are paused and cold wallets are secure, so the immediate selling channel is closed. The token's price also reflects thin trading during the freeze. A better test comes when withdrawals reopen and holders who wanted out can finally sell. For scale, Oracle fell 6.47% today to $139.54 without any security incident.

Who is responsible for the Bitget breach and how did the attackers operate?

Bitget's chief executive said North Korea was highly likely responsible. The company said attackers breached a backend wallet system and forged transfers rather than stealing private keys, which means the compromise was in Bitget's internal authorisation layer, not in key custody. Cold wallets were unaffected. The exchange has not published forensic detail, and the attribution remains the CEO's stated assessment rather than a confirmed finding.

Bottom Line

BGB's 3% to 5% decline looks calm only because withdrawals are frozen — the real price arrives when they reopen.

Disclaimer: This article is for informational purposes only and does not constitute investment advice. CFD trading carries high risk of capital loss.