Bitget confirmed a security breach involving unauthorized transfers from its hot and warm wallets. The incident was detected on September 24, 2026, at 18:31 UTC. CEO Gracy Chen stated that the total value of the affected assets is approximately $351.6 million.
On-chain analysis identified suspicious transfers of ETH, USDT, USDC, AVAX, and BNB to a single address. One transaction involved the purchase of 7,111 ETH on Arbitrum using $19.67 million in USDT. The exchange noted that its cold wallet infrastructure remains secure.
Following the breach, Bitget temporarily suspended withdrawals to conduct a security review, while deposits and trading services remain active. The company has notified law enforcement and security firms, and it plans to release a full incident report within 24 hours.
CEO Gracy Chen confirmed that user funds are protected by the company's User Protection Fund. The fund currently holds more than $464 million, which is intended to cover the total losses incurred during the incident.
