Bitget Hack Drains $351.6M, Freezes All Withdrawals

Bitget confirmed on 24 September 2026 that roughly $351.6 million was taken from its internet-connected hot and warm wallets, with unauthorised transfers detected at 18:31 UTC. Chief executive Gracy Chen said the exchange's offline cold wallets were untouched and that the User Protection Fund, holding more than $464 million, covers the full loss. Withdrawals are frozen for every user pending a security review, while deposits and trading continue. Bitget's own token, BGB, fell roughly 5% after reports of the hack circulated late in the US session, even as the broader crypto market gained nearly 10% over the past week.

Context — Why a $351.6M Exchange Hack Matters Now

The scale alone puts this in rare company for 2026. DeFiLlama had recorded about $331 million lost across 17 incidents in September before the 19 September Fetch.ai exploit, most of it from a roughly $320 million incident at Liquid Network whose attackers claimed to be white hat hackers. Adding Bitget's confirmed figure lifts September's reported total above $684 million, overtaking April as the costliest month of the year.

The attack method remains undisclosed. Bitget has not said how the attackers got in, and social media claims that North Korea is responsible have not been confirmed. The exchange has declined to speculate.

What triggered the timing was straightforward. Bitget's systems flagged unauthorised transfers out of its hot and warm layers at 18:31 UTC, and emergency procedures were activated immediately. Deposits and trading were left running while withdrawals were halted.

Independent researchers spotted the outflows before Bitget spoke. Arkham Intelligence analyst Emmett Gallic said funds from several Bitget-labelled wallets across multiple blockchains were consolidated into a single address, with early estimates at $174 million to $183 million — roughly half the figure Bitget later confirmed.

The distinction between wallet types explains why hot wallets are the usual target. An exchange holds customer coins in digital wallets controlled by private keys. A hot wallet stays online to process withdrawals quickly; a cold wallet keeps its keys offline, making it slower but far harder to reach. Exchanges typically keep only a working float in hot wallets. Because blockchain transfers generally cannot be reversed, there is no bank to call once coins leave a compromised wallet.

Data — What the Numbers Show

The confirmed loss of $351.6 million is nearly double the $174 million to $183 million that on-chain researchers first estimated. That gap matters: the early figure came from visible wallet consolidation, while Bitget's total reflects the full scope of what left its hot and warm layers.

One transaction stood out. A newly created wallet swapped about $19.7 million of USDT0, a cross-chain version of the Tether stablecoin, into 7,111 ether in around six minutes, paying up to 5% above the market price. Paying that premium suggests speed mattered more than price.

Metric	Value
Confirmed loss	$351.6 million
Early on-chain estimate	$174M–$183M
User Protection Fund	$464 million+
September total (post-Bitget)	$684 million+
BGB move	-5%
Broader crypto market (1 week)	+10%

The market reaction split along a clear line. BGB fell roughly 5%, while the broader crypto market is up nearly 10% over the past week. Traders are treating this as a Bitget problem rather than a threat to the whole sector.

Analysis — What It Means for Exchanges and Traders

The second-order risk is not the lost coins. It is time. The longer withdrawals stay frozen, the more likely it is that doubts spread to other centralised exchanges. Every day the freeze runs, users on competing platforms have a reason to ask whether their own exchange's hot-wallet float is large enough to absorb a similar hit.

The attacker's rushed ether buying on Arbitrum briefly pushed the WETH/USDC pool price to about $2,870. That was a short-lived, local distortion, not real demand. It tells you the attacker prioritised converting stablecoins into an asset with no central issuer able to freeze it. Stablecoins such as Tether can be frozen by their issuer; ether cannot.

There is a genuine counter-argument to the bull case here. Chen said the User Protection Fund covers the entire loss. That fund holds more than $464 million, larger than the confirmed figure. But the fund's asset mix has not been independently verified, and the freeze applies even to users whose funds were untouched. A fund balance on a dashboard is not the same as liquid, immediately deployable capital.

Positioning reflects that uncertainty. BGB holders are short-term exposed. Broader crypto traders are not pricing contagion — a 10% weekly gain in the wider market shows that. The flow question is whether that confidence survives a long freeze.

Outlook — What to Watch Next

Two catalysts matter most. Bitget has promised hourly updates and a full incident report within 24 hours, covering the root cause and corrective steps. That report should explain how the breach happened. Whether withdrawals resume smoothly and in full is the second test.

A quick reopening with a clear root cause would support Bitget's assurances. A longer freeze or an upward revision to the loss figure would weaken them. The path of the stolen ether also matters: if it moves through privacy tools such as Tornado Cash, recovery becomes far less likely.

Bitget has flagged the receiving addresses and alerted law enforcement and blockchain security firms. Anyone holding funds on the platform may be best served by waiting for that report before drawing conclusions.

Frequently Asked Questions

What does the Bitget hack mean for retail investors?

For anyone with coins on an exchange, the lesson is direct: those coins are only as safe as that exchange's security and its ability to absorb losses. Bitget says customer balances remain accurate and the User Protection Fund covers the full $351.6 million loss. But the freeze applies even to untouched funds, so access — not just solvency — is the immediate issue.

What happens next for Bitget users?

Deposits and trading are still running, but withdrawals are frozen for all users pending a security review. Bitget has promised hourly updates and a full incident report within 24 hours. That report should detail the root cause and corrective steps. Whether withdrawals then resume smoothly and in full is the practical test of whether the exchange's assurances hold.

Why did BGB fall only 5% while the hack was worth $351.6 million?

The wider crypto market is up nearly 10% over the past week, which suggests traders see this as a Bitget-specific problem rather than a sector threat. BGB's roughly 5% drop reflects that narrow read. The bigger risk to sentiment is time: the longer withdrawals stay frozen, the more likely doubts spread to other centralised exchanges.

Bottom Line

Bitget's $464 million protection fund covers the loss on paper, but only a fast, clean withdrawal restart will settle whether users believe it.

Disclaimer: This article is for informational purposes only and does not constitute investment advice. CFD trading carries high risk of capital loss.