Bitget Raises Hack Estimate to $387.5 M and Outlines Staged Withdrawal Restart

Bitget has updated the amount of assets moved to attacker‑controlled wallets to roughly $387.5 million, up from the earlier estimate of $351.6 million. The exchange says the vulnerability has been identified, patched and no further unauthorized transfers are possible.

Revised loss estimate

The higher figure reflects additional assets uncovered during transaction tracing, not a new wave of theft. Affected assets span multiple blockchains, including Bitcoin, Ethereum and other EVM‑compatible chains, the XRP Ledger, Zcash and TRON.

Vulnerability remediation

Bitget’s security team has pinpointed the attack path and the method used to bypass existing controls. Independent investigators from Mandiant and SlowMist are assisting with the investigation. The exchange also launched a recovery bounty program, offering a percentage of recovered funds to eligible participants.

Staged withdrawal restoration

Withdrawals will resume in phases:

• Bitcoin – September 28
• Ethereum and other supported networks – September 29
• USDT – September 30
• Other tokens, fiat services and peer‑to‑peer withdrawals – by October 2

Bitget maintains that customer account balances remain intact and that its protection arrangements cover the financial impact.

Next steps

The focus now shifts to asset recovery, completing the bounty program and ensuring a secure return to normal operations without further security incidents.