Bitget Institutional Funds Held at Swiss Bank as $387 Million Hack Freezes Retail Assets

Bitget retail withdrawals suspended following wallet breach

Bitget, a cryptocurrency exchange, reported that approximately $387.5 million in assets were transferred to attacker-controlled addresses during a security breach on September 24. An exchange is a digital marketplace where users trade cryptocurrencies like Bitcoin.

While the platform has kept deposits and trading operational, it has suspended all withdrawals for ordinary retail users. This freeze prevents customers from moving their funds out of the exchange while the company investigates the incident.

Key details of the security incident

• Bitget raised its initial loss estimate from $351.6 million to $387.5 million after a full accounting of TRON and Zcash transfers.
• The breach affected hot and warm wallets, which are digital storage systems connected to the internet.
• Cold wallets, which are offline storage systems used for higher security, remained unaffected.
• The exchange is working with security firms Mandiant and SlowMist to investigate the unauthorized transfers.

Institutional clients use Swiss bank for asset protection

On the day of the breach, Sygnum Bank announced that Bitget’s institutional clients can trade using collateral held at the Swiss bank instead of the exchange itself. This off-exchange custody model means the assets are kept in segregated accounts in Switzerland rather than in Bitget's own digital wallets.

This arrangement is intended to shield institutional funds from exchange-level breaches or financial distress. However, it is currently undisclosed how many clients have moved their assets to this service or if any of these bank-held funds were involved in the recent incident.

Current status of user funds and protection measures

Bitget has pointed to its User Protection Fund as a backstop for those affected. This fund holds 5,500 Bitcoin (BTC), a type of digital currency, and was valued at over $464 million at the time of the breach. The exchange states that users may claim for qualifying losses from platform-wide events.

The company claims to have identified and fixed the underlying vulnerability that led to the hack. Despite these repairs, ordinary customers are still waiting for a confirmed timeline on when they can once again withdraw their assets.

What remains uncertain for Bitget users

While the exchange has containerized the incident, it is unclear when retail withdrawal services will return to normal. Additionally, while the Sygnum Bank partnership offers a layer of safety for large institutions, the specific terms regarding when that collateral can be released during an exchange disruption have not been made public.

Sources

• CryptoSlate

Read also: Decrypt headline links Bitget to $387M in hack losses, but article details are missing from the source

Read also: THORChain Refuses Bitget Request to Block Hack Addresses