Bitget To Resume Withdrawals In Phases After $387.5 Million Security Incident

Bitget has temporarily paused withdrawals after a security incident on September 24, 2026. The crypto exchange has now announced plans to resume withdrawals in phases, while continuing security checks and remediation work.

According to the latest update shared by Bitget on X (formerly known as Twitter), assets equivalent to approximately $387.50 million were transferred to attacker-controlled addresses across multiple networks. The revised figure includes affected assets on Zcash and TRON that were not included in the initial estimate.

The exchange said the incident remains contained and no further unauthorised transfers are possible. The affected networks include Ethereum and several EVM networks, XRP Ledger, Zcash, and TRON. Confirmed affected assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, Binance BNB, AVAX and TRX.

Bitget said the figures reflect information confirmed at the time of publication and may be updated as additional transactions are classified and traced. Its investigation and tracing efforts remain ongoing, with Mandiant and SlowMist supporting the investigation.

Bitget To Resume Withdrawals In Phases

Bitget said the vulnerability involved in the incident has been identified and remediated. Its security and technical teams are conducting additional validation and security checks across the withdrawal infrastructure.

The withdrawal pause remains in place while these checks are completed. Bitget said the pause is a security measure and is not related to the availability of user assets. According to the exchange, user account balances remain unaffected, while trading and deposits continue to operate.

Bidget added that withdrawals will resume in phases, starting with Bitcoin on the Bitcoin network on September 28 at 8:00 UTC (1:30 PM IST). Ethereum withdrawals across Ethereum, BSC, Arbitrum, Base and Optimism are scheduled to resume on September 29 at 8:00 UTC (1:30 PM IST). Also, USDT withdrawals across Ethereum, BSC, Solana and Tron will resume on September 30 at 8:00 UTC (1:30 PM IST). Withdrawals for other tokens, along with fiat and P2P services, are scheduled to resume on October 2 at 8:00 UTC (1:30 PM IST).

Bitget said its Protection Fund covers the financial impact of the platform-wide incident. The exchange said it will continue providing updates on the investigation, asset recovery, withdrawal restoration, and the User Protection Fund. It reiterated that no further unauthorised transfers have occurred since the incident was contained.