Bitget lifts breach total to $388 million and keeps withdrawals paused
Bitget now puts the breach at about $388 million
Crypto exchange Bitget says about $388 million in assets was affected by its security breach, up from the $352 million it reported earlier. A crypto exchange is a platform where people buy, sell and store digital assets.
In a Friday update, the company said $387.5 million was transferred to addresses controlled by the attacker. That figure comes from onchain tracing, which means following transactions on a blockchain, the public record of crypto transfers.
Bitget also said it will keep withdrawals paused and has launched a bounty program. A bounty program pays people to help freeze or recover assets.
Key numbers from the update
- $388 million: assets affected in the breach, according to Bitget's revised report.
- $387.5 million: amount Bitget says was sent to attacker-controlled addresses.
- About $35 million: the increase over the figure given on Thursday.
- $352 million: the total Bitget reported earlier.
- Withdrawals: still paused, with a bounty program running.
Why the total grew
Bitget said the higher number is a more complete accounting of transfers made during the incident. The revision adds affected assets on Zcash and TRON that were missing from the first estimate.
The exchange said the change does not mean new unauthorized transfers took place. It said the incident is contained and that no further unauthorized transfers are possible.
Networks and assets the exchange named
According to Bitget, the incident involved addresses on Ethereum Virtual Machine (EVM) networks, the XRP Ledger, Zcash and TRON.
Assets taken included XRP, Ether (ETH), Tether's USDt (USDT), Zcash (ZEC), USDC, USDT0, XAUt, BNB, AVAX and TRX.
What is confirmed
Bitget itself published the revised totals, the list of networks and assets, the continued withdrawal pause and the creation of the bounty program. Those details come directly from the exchange's own update.
What is still unclear
The follow-up report did not address comments made on Thursday by Bitget CEO Gracy Chen. She speculated that a North Korean hacking group may have been behind the attack, citing IP clues. That claim remains unconfirmed and is not supported by the updated report.
The available material also does not say when withdrawals will resume or how much the bounty program offers.
How the breach compares
Even after the revision, the Bitget breach remains one of the largest to hit the crypto industry. Hackers stole about $1.5 billion worth of Ether from Bybit in February 2025.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.