Bitget Resumes Withdrawals After $388 Million Security Breach
Bitget, one of the largest centralized cryptocurrency exchanges, has resumed user withdrawals following a significant security breach that occurred on September 24. This breach resulted in the theft of approximately $388 million from the exchange's operational wallets. In the aftermath, Bitget's tracked reserves have fallen to around $5.7 billion, with customer outflows reaching approximately $463 million within the first 24 hours of withdrawal resumption.
The attack took advantage of a zero-day vulnerability in a third-party security application, allowing attackers to spoof transactions by obtaining internal credentials. However, Bitget has assured users that private keys and cold wallets were not compromised during the incident.
Upon detecting the breach, Bitget promptly suspended withdrawals while keeping trading and deposits operational. The resumption of withdrawals has been phased, with Bitcoin withdrawals reopening on September 28, followed by Ethereum on September 29, and USDT on September 30. Other assets and peer-to-peer transactions are expected to resume by October 2.
Shortly after the Bitcoin withdrawal window reopened, the exchange processed over 4,098 BTC in withdrawals. Prior to the hack, Bitget's total balance was above $6.7 billion, indicating that the breach represented roughly 5-6% of its total reserves.
CEO Gracy Chen acted swiftly to reassure users that their account balances would remain intact. The exchange plans to absorb the losses through its User Protection Fund, which was valued at over $464 million before the incident. This fund was specifically designed for situations like this and was sufficient to cover the $388 million theft with some remaining cushion.
Investigation and Customer Impact Analysis
To investigate the breach, Bitget has enlisted the help of cybersecurity firms including Mandiant and SlowMist to trace the stolen funds and identify the attackers. Initial assessments suggest a possible connection to North Korean-linked hacking groups, which aligns with a broader trend of state-sponsored crypto theft that has plagued exchanges in recent years.
The substantial customer outflows of approximately $463 million within just 24 hours illustrate the impact of the breach, as the total balance declined by about $600 million since the day before withdrawals resumed. This decline combines the theft itself with voluntary outflows, highlighting the dual challenge faced by the exchange.
The phased approach to reopening withdrawals is seen as a pragmatic decision. A complete reopening at once could have triggered a bank-run scenario, while a controlled rollout allows the exchange to manage liquidity and demonstrate operational stability.
Filed & Cleared
The zero-day vulnerability, originating from a third-party application rather than Bitget's own infrastructure, raises important questions about supply-chain security standards that have not yet been adequately addressed by most regulatory frameworks.
For Bitget, successfully restoring all withdrawals by the scheduled date of October 2, ensuring that the protection fund compensates all users, and providing credible forensic findings from its investigation partners could pave the way for recovery. Despite the challenges, the remaining $5.7 billion in reserves offers a substantial buffer. However, the $463 million that left in just 24 hours reflects the decisions made by users in response to the breach.
