Published 6 hours ago • loading... • Updated 1 hour ago
Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist
Bitget said the flaw is fixed and its User Protection Fund will cover losses as it restores services in stages.
On Monday, September 28, 2026, Bitget resumed Bitcoin withdrawals at 08:00 UTC, marking the first phase of service restoration following a September 24 security breach affecting approximately $388 million in assets.
During a September 28 livestream, CEO Gracy Chen explained that attackers exploited a third-party security product vulnerability to obtain internal network credentials, then used them to generate fraudulent withdrawal commands bypassing risk controls.
The exchange's User Protection Fund, holding about $464 million, will cover the losses in full, while Mandiant and SlowMist investigators continue reviewing the approximately $387.5 million theft.
Ether withdrawals are set for Tuesday across Ethereum, BSC, Arbitrum, Base, and Optimism, while USDT withdrawals on Ethereum, BSC, Solana, and Tron follow on Wednesday as security checks progress.
The exchange launched a 5% bounty program for frozen or recovered stolen assets, while remaining services including fiat and peer-to-peer transactions are scheduled to return Friday, October 2.