Bitget has updated its report on Thursday’s security breach, saying about $387.5 million in assets were affected, not the $352 million it had previously disclosed.
In a Friday update, the crypto exchange said withdrawals will remain paused after the incident and that it has launched a bounty program to encourage efforts to freeze or recover the assets. Bitget said onchain tracing showed that “$387.5 million were transferred to attacker-controlled addresses,” roughly $35 million more than the figure released on Thursday.
Revision adds assets on Zcash and TRON
Bitget said the revised total reflects a more complete accounting of transfers that took place during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate.
The exchange said: “The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate. It does not reflect further unauthorized transfers. The incident remains contained and no further unauthorized transfers are possible.”
Multiple networks and tokens were involved
According to Bitget, the incident involved addresses on Ethereum Virtual Machine (EVM) networks, the XRP Ledger, Zcash and TRON.
The assets listed as stolen were XRP, Ether (ETH), Tether’s USDt (USDT), Zcash (ZEC), USDC, USDT0, XAUt, BNB, AVAX and TRX.
The follow-up report did not address comments made on Thursday by Bitget CEO Gracy Chen, who had speculated that a North Korean hacking group may have been behind the attack.
Still one of the industry’s largest breaches
Even with the updated figure for assets sent to hacker-controlled addresses, the Bitget breach remains one of the largest security incidents to hit the crypto industry.
For comparison, hackers stole about $1.5 billion worth of Ether from Bybit in February 2025.