Bitget loses about $351.6 million after hot wallet attack

At 18:31 UTC on September 24, 2026, the security systems of the cryptocurrency exchange Bitget recorded unauthorized transfers from some of its hot wallets. The company immediately launched emergency response protocols and disclosed the first confirmed details of the incident.

According to Bitget's preliminary estimate, the amount of affected funds is about $351.6 million. The exchange has a three-tier wallet architecture, and the incident affected only part of the hot and warm tiers. Cold wallets, according to the company's statement, remained fully secure.

User funds were not affected. The damage falls within the coverage of the User Protection Fund, which currently holds more than $464 million. The exchange calls the balances in accounts correct and the assets protected.

What was done

In the first minutes after detection, the emergency response team was activated. Suspicious transfer addresses were identified, flagged, and information about them was shared. Withdrawals were temporarily suspended as a precautionary measure while the security review is under way.

Deposits and trading are operating as usual; those operations were not halted. Withdrawals will resume as soon as the review is completed. The company promised to account for every dollar and every decision.

What's next

Regulators and specialized blockchain security companies were notified of what happened. Bitget is not disclosing the attack vector and will not speculate on the matter until the investigation is complete. Updates are promised to be published in official channels as new information becomes available.

Image: Bitget Public domain

Translation editors: Соловьев В., Пеков А.