Bitget confirms $351.6M breach, withdrawals paused
Bitget confirmed a $351.6M breach of hot and warm wallets. Withdrawals are paused for a security review, but user funds are protected by Bitget’s fund. Cold wallets remain secure.
Bitget has confirmed a significant security breach impacting its hot and warm wallets, resulting in unauthorized transfers totaling approximately $351.6 million in cryptocurrency. The breach was detected on September 24, 2026, at 18:31 UTC, triggering the immediate activation of emergency response protocols. Withdrawals have been temporarily suspended as a security review is conducted, though deposits and trading remain operational. Bitget emphasized that the breach was limited to hot and warm wallets, with cold wallets remaining secure. The company assured users that their funds are protected by its User Protection Fund, which currently holds over $464 million. On-chain analysis revealed that assets such as ETH, USDT, USDC, AVAX, BNB, and XAUT were transferred from Bitget-labeled wallets to a single new address, with some routed through UniswapX and 1inch Fusion. Law enforcement and security firms are involved in the investigation. Bitget has pledged transparency, promising hourly updates and a full incident report within 24 hours.