Unauthorized Transfers Drained $351.6 Million from Bitget
The exchange suspended withdrawals following a security breach that targeted its hot and warm wallets.
Updated on Sept. 24, 2026 in Cybersecurity
Live Poll
Do you trust cryptocurrency exchanges to keep your digital assets safe from hackers?
Bitget reported that $351.6 million was drained from its hot and warm wallets on September 24, 2026. The exchange has suspended platform withdrawals while it conducts a security review.
Why it matters
The breach highlights the persistent vulnerability of centralized crypto exchanges to large-scale asset theft, contributing to a broader industry trend of rising monthly losses. September 2026 losses across the sector have already reached over $684 million.
The incident involved the unauthorized transfer of $351.6 million from hot and warm wallets, which are internet-connected storage systems, while cold wallets remained unaffected. The exchange maintains a User Protection Fund worth $464 million to manage such exposure.
The players
Bitget
A global cryptocurrency exchange providing spot and derivatives trading services and maintaining a substantial user protection fund.
The details
The breach occurred when unauthorized actors gained access to hot and warm wallets, the primary interfaces for facilitating real-time transactions on the exchange. Following the 18:31 UTC detection, the platform activated emergency response procedures, which included flagging the recipient addresses and notifying law enforcement. While the breach disabled platform withdrawals, cold wallets—storage systems disconnected from the internet to prevent remote exploitation—retained their integrity.
Timeline
April 2026: Crypto exploits generated $646.9 million in losses.
September 2026: Total monthly industry losses exceeded $684 million.
Sept. 24, 2026, 18:31 UTC: Bitget detected the unauthorized transfers.
Within 24 hours of Sept. 24: Bitget plans to publish a full incident report.
The Tech Race
This breach surpasses the $646.9 million in total crypto losses recorded in April 2026, signaling a persistent upward trend in exchange security failures. The industry continues to compete on the efficacy of insurance-like protection funds against the rising sophistication of unauthorized access exploits.
Users currently face a total suspension of platform withdrawals, preventing access to funds held on the exchange. The long-term impact on user accounts will depend on the findings of the pending security review and the deployment of the $464 million User Protection Fund.
The takeaway
The security of custodial wallets remains the critical point of failure for major exchanges. Users should monitor the forthcoming official incident report for updates on withdrawal restoration and potential asset recovery timelines.
What happens next
Bitget is scheduled to release a comprehensive incident report within 24 hours of the initial breach detection to detail the extent of the impact and potential asset recovery.
Further reading
For broader trends in platform defense, see our coverage in Cybersecurity.
Live Poll
Do you trust cryptocurrency exchanges to keep your digital assets safe from hackers?
