Hackers steal $351.6m from Bitget wallets

Cryptocurrency exchange Bitget announced that approximately $351.6 million was lost due to unauthorized access to a portion of its wallet infrastructure. The breach was detected on Thursday, September 24 at 18:31 UTC, prompting Bitget to activate emergency response protocols. CEO Gracy Chen disclosed that the breach was limited to certain hot and warm wallet layers, while cold wallets remained secure.

Bitget temporarily suspended withdrawals and assured users that the loss was covered by its User Protection Fund, which held more than $464 million at the time. Chen further revealed that the attackers compromised a critical backend system used for transaction data spoofing and triggered Bitget's authorization process to move funds out.

She emphasized that private key compromise had been ruled out, preventing more severe risk scenarios and ensuring no further unauthorized transfers were possible. Bitget confirmed that the affected assets included ETH, XRP, BNB, AVAX, USDT, USDC, and other tokens across multiple blockchain networks. The exchange also stated that Bitget Wallet, its decentralized wallet product, was unaffected by the incident.

Bitget is collaborating with global investigators and has notified law enforcement agencies and on-chain security firms to contain the situation and recover the affected assets.