Bitget2026-09-28 07:47:18Bitget CEO says exchange will step up security spending and share lessons with peersBitget CEO Gracy Chen said during a livestream reviewing the recent Bitget incident that the exchange wants to handle its investigation, fund recovery, and rectification work under what she described as the highest standards in the industry. She said each step should be carried out in a public and transparent way and remain open to scrutiny from both users and the broader crypto sector. Chen also said Bitget plans to devote more resources to security going forward. In addition, the company intends to share relevant experience and information with more industry peers, with the stated goal of contributing to security improvements across the sector. The remarks were made during the 「Bitget Incident Review」 livestream.360
Bitget2026-09-26 12:56:41Bitget hacker moves about $83 million in stolen XRP as Ripple cannot freeze the fundsThe hacker tied to Bitget’s roughly $387.5 million breach has moved about $83 million in stolen XRP out of three holding wallets, while around $75 million remains across the five original accounts, according to CoinDesk’s review of XRP Ledger activity. The case has drawn attention to a core limitation of the network: while issuers can freeze tokens they create on the XRP Ledger, that control does not apply to XRP itself. As a result, Ripple cannot stop transfers from wallets controlled by the attacker. CoinDesk reported that nearly 103 million XRP was taken from Bitget on Thursday and split among five wallets. By 12:41 UTC on Saturday, two wallets that had each held 20 million XRP were nearly empty, and a third had fallen to about 5.8 million XRP. Transfer activity picked up overnight, with balances in the original five wallets dropping from about 70 million XRP at 04:32 UTC Saturday to 49 million roughly eight hours later. Bitget said its protection fund will cover the losses and that customer balances remain unaffected. The exchange plans to resume withdrawals in stages, starting with bitcoin on Sept. 28, ether on Sept. 29, USDT on Sept. 30 and other tokens on Oct. 2. Circle and Tether have also frozen about $320,000 in related stablecoins.410
Bitget2026-09-26 09:52:40Bitget to Resume Withdrawals in Four Stages, With Bitcoin First on Sept. 28Bitget said the vulnerability tied to its recent hack has been identified and patched, and withdrawals will return in four phases. Bitcoin withdrawals are scheduled to resume first at 16:00 Taiwan time on Sept. 28, followed by Ethereum-related networks on Sept. 29 and USDT on Sept. 30. Other tokens, fiat services, and P2P functions are set to return on Oct. 2. The exchange said the withdrawal pause was part of a final round of security checks and was not related to whether customer assets were fully backed. Bitget added that user account balances were unaffected and that the roughly $387.5 million loss would be covered by its protection fund. Trading and deposits remain available. Bitget also said the incident has been contained and that no more unauthorized outflows will occur. Google-owned cybersecurity firm Mandiant and blockchain security company SlowMist are continuing to assist with the investigation. The company later revised the size of assets sent to attacker-controlled addresses higher from an initial estimate of about $351.6 million, citing previously uncounted assets on Zcash and TRON.420
Bitget2026-09-26 01:12:28Bitget says $357 million was moved without authorization as Elliptic points to North Korea-linked hackersCrypto exchange Bitget said it detected unauthorized asset transfers on Thursday, with losses reaching about $357 million across multiple tokens. Blockchain analytics firm Elliptic said the laundering pattern seen after the theft, along with overlaps in on-chain addresses, points to TraderTraitor, a hacking group it links to North Korea. The report said the attackers quickly swapped tokens and moved funds across chains, and that some of the addresses were connected to earlier hacks, including last year’s record $1.5 billion Bybit theft. Elliptic added that North Korea-linked groups have been tied to more than 50 digital-asset security incidents this year, with roughly $1.2 billion stolen in total. Bitget said it suspended withdrawals after the incident and stressed that its offline cold wallets were not affected. CEO Gracy Chen said the exchange’s $464 million user protection fund is large enough to fully cover the loss. The company is now working with Mandiant and SlowMist to investigate the source of the attack and the details of the vulnerability, while preparing to announce a withdrawal resumption plan at 4:00 UTC on Sept. 26.520
Bitget2026-09-26 00:39:04Bitget CEO denies private key leak, says attacker forged transaction data to steal fundsBitget CEO Gracy Chen said on X that the attacker stole funds by breaching a critical backend system tied to the exchange’s wallet infrastructure, forging transaction data, and bypassing approval procedures. Chen said the incident was not caused by a private key leak. She also wrote that the company had confirmed there had been no additional abnormal outflows of funds. Bitget said it is preparing to restore withdrawal services and has identified part of the attacker’s withdrawal routes. The company added that previously reported loss figures may be revised upward. The update was cited by CoinPost and carried by Techub as a market analysis flash item.380
Bitget2026-09-25 17:08:57Bitget hack losses rise to $387.5 million as North Korea angle draws scrutinyBitget said losses from its September 24 hack have climbed to about $387.5 million, up from an initial on-chain estimate of roughly $183 million and a later public tally of $351.6 million. The exchange said its systems detected unauthorized outflows from some hot wallets at 18:31 UTC, and CEO Gracy Chen said the attackers did not obtain private keys or forge customer withdrawal requests. Instead, she said, they compromised a backend system in Bitget’s wallet infrastructure and spoofed transaction data, causing the platform’s own authorization process to approve transfers that appeared routine. On-chain researchers traced funds moving across at least five blockchains, with the largest single portion of the haul being about 103 million XRP valued at roughly $157 million. Bitget said the outflow has been stopped, deposits and trading remained operational, and its user protection fund of more than $464 million will cover the full loss so customer balances remain intact. Chen has pointed to indicators she said resemble methods used by North Korean groups, including VPN choices and on-chain signatures, while stressing that the attacker has not been confirmed and no technical evidence has yet been made public.380
Bitget2026-09-25 17:17:45Bitget says $387.5 million was moved in breach, revising earlier estimateBitget has revised the size of the asset transfers tied to its Thursday security breach, saying about $387.5 million was moved to attacker-controlled addresses rather than the $352 million it had reported earlier. In a Friday update, the exchange said the higher figure came from a more complete review of transfers during the incident, including affected assets on Zcash and TRON that were not counted in the initial estimate. Bitget added that the revision does not indicate any new unauthorized transfers and said the incident remains contained, with no further unauthorized movement possible. The company also said withdrawals will remain paused for now and that it has launched a bounty program aimed at helping freeze or recover the funds. According to the exchange, the breach involved addresses across Ethereum Virtual Machine networks, the XRP Ledger, Zcash and TRON, and the stolen assets included XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX. The follow-up statement did not revisit CEO Gracy Chen’s earlier comment that a North Korean hacking group may have been responsible.470
Bitget2026-09-18 10:14:35Bitget CLO Hon Ng says responsibility remains the constant as the exchange marks its eighth yearBitget Chief Legal Officer Hon Ng used the exchange’s eighth anniversary letter to frame the company’s growth around one theme: responsibility. In the letter, Ng said Bitget has grown from a crypto derivatives venue into a broader platform serving more than 125 million users, with expansion under its Universal Exchange, or UEX, vision into asset classes including U.S. stocks, gold and foreign exchange. The letter laid out several areas the company sees as central to that responsibility. Ng said Bitget has published proof-of-reserves data every month since launching the system in December 2022, maintaining at least a 1:1 reserve ratio for user assets and allowing users to verify inclusion through a Merkle Tree mechanism. As of September 2026, the exchange said it had released 46 proof-of-reserves reports, with an overall reserve ratio of 135% and an average ratio above 120%. The coverage has also been expanded from four assets to 19, including XAUT. Ng also pointed to Bitget’s Protection Fund, established in 2022 with an initial size of $300 million and carrying an average valuation of about $382 million in August 2026, alongside account security tools, transaction monitoring, anti-fraud systems, a market order and token responsibility framework, and regulatory registrations, licenses or approvals across multiple jurisdictions.640
