Bitget raises hack estimate to $387.5M, resumes withdrawals September 28

Bitget increased the confirmed value of assets transferred to attacker-controlled wallets to about $387.5 million from $351.6 million. The exchange attributes the higher figure to additional assets identified through transaction tracing, not new unauthorized transfers. It reports the attack path and control-bypass method have been identified and remediated, with no further unauthorized transfers detected. Independent investigators from Mandiant and SlowMist are involved. A recovery bounty program is active, offering a percentage of assets to parties whose actions directly lead to funds being frozen or recovered. Some funds have been frozen via coordination with industry partners. Affected assets span multiple networks: Ethereum and other EVM chains, XRP Ledger, Zcash, and TRON.

Withdrawal Restoration Schedule

- Bitcoin withdrawals: September 28
- Ether withdrawals across supported networks: September 29
- USDT withdrawals: September 30
- Other tokens, fiat services, and peer-to-peer withdrawals: by October 2

Bitget states customer balances remain intact and that its protection arrangements cover the incident’s financial impact. The staged reopening of withdrawals is the key operational test following the breach. The updated $387.5 million figure materially changes the scope from the initial report, shifting focus to remediation, asset recovery, and restoring normal operations without reintroducing security risks.