Bitget Resumes Bitcoin Withdrawals After $388 Million Hack
Bitget brings back Bitcoin withdrawals after $388 million breach
Crypto exchange Bitget has resumed Bitcoin (BTC) withdrawals after a security breach that affected nearly $388 million in assets. The hack took place on Sept. 24, 2026, and forced the exchange to suspend withdrawals.
According to Bitget, the breach hit part of its hot and warm wallets — online storage used for day-to-day operations — while its cold wallets stayed secure. The exchange first estimated the stolen amount at $351.6 million, then raised it to $387.5 million after finding extra transfers on Zcash and Tron.
Key points
- Bitcoin withdrawals resumed Monday on the Bitcoin network and BNB Smart Chain.
- ETH withdrawals are set to return Tuesday on Ethereum, BNB Smart Chain, Arbitrum, Base and Optimism.
- USDT withdrawals are planned for Wednesday on Ethereum, BNB Smart Chain, Solana and Tron.
- Withdrawals for other assets and peer-to-peer services are due back Friday.
- The schedule applies to all users, with no priority access for institutions, VIPs or staff.
What Bitget has said
CEO Gracy Chen explained the order of the rollout during a Monday ask-me-anything session. "We restored BTC first because the withdrawal pipeline is the first to be completed," she said. She added that Ether (ETH) and Tether's USDt (USDT), a stablecoin pegged to the US dollar, would follow as security checks progress.
Attacker keeps moving funds through THORChain
On-chain tracking firm Lookonchain reported Monday that the attacker was swapping Ether for Bitcoin through THORChain, a decentralized protocol for exchanging assets across blockchains. Arkham data showed ETH linked to the attacker flowing into THORChain vaults.
Chen has publicly called on THORChain to refuse service to addresses tied to the attack. THORChain responded Monday that its network halt is an emergency security mechanism affecting the whole protocol and "is not a selective freeze of specific funds or an individual swap."
Crypto author Anndy Lian said THORChain can halt trading, stop outbound transactions or pause a connected chain, but these measures affect all users. He noted the protocol has no built-in address blacklist, limiting its ability to block specific addresses.
What is confirmed
Bitget has confirmed the restart of BTC withdrawals and published a schedule for the return of ETH, USDT and other services. The exchange has confirmed the breach affected its hot and warm wallet infrastructure and revised the stolen total to $387.5 million. On-chain data showing the attacker using THORChain comes from Lookonchain and Arkham, not from official records.
What is still unclear
The identity of the attacker is not known from the supplied material. It also remains to be seen whether THORChain will take any action against the hacker's addresses, given its stated limits.
What happens next
If the schedule holds, ETH withdrawals return Tuesday, USDT on Wednesday, and other assets plus peer-to-peer services on Friday.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.