TLDR
- Bitget updated its breach report, raising the affected assets total from $352 million to $388 million.
- The new figure adds stolen assets found on Zcash and TRON networks.
- Withdrawals will resume in phases starting September 28, with full restoration by October 2.
- Circle and Tether froze about $318,000 in stablecoins linked to the attacker’s address.
- Chen has suggested North Korea’s Lazarus Group could be behind the attack, though this is unconfirmed.
Bitget released an updated report on its recent security breach, saying the total affected assets reached about $388 million. This is higher than the $352 million figure the exchange gave a day earlier.
— Bitget (@bitget) September 26, 2026
The company said the new number comes from a more complete review of blockchain activity. It found extra stolen assets on the Zcash and TRON networks that were missed in the first count.
Bitget was clear that the higher number does not mean new theft took place. It said the incident is fully contained and no further unauthorized transfers can happen.
What Assets Were Stolen
The breach touched several blockchain networks. These include Ethereum Virtual Machine networks, the XRP Ledger, Zcash, and TRON.
It looks like the #Bitget hacker withdrew $1.23M from #Binance 11 hours ago.
Wallet 0x4885 withdrew 257.6 $ETH ($692K) and 545K $USDT from #Binance, then swapped the 545K $USDT for 200.2 $ETH.
It then transferred all 457.9 $ETH ($1.23M) to the #Bitget hacker's wallet an hour… pic.twitter.com/A3S3TWeP4j
— Lookonchain (@lookonchain) September 26, 2026
Tokens stolen included XRP, Ether, Tether’s USDt, Zcash, USDC, USDT0, XAUt, BNB, AVAX, and TRX. XRP made up the largest single portion of the theft, at around $157.5 million.
The exchange said its cold wallets, which store the bulk of user funds offline, were not affected. Only parts of its hot and warm wallets were hit.
Bitget paused withdrawals right after the breach as a safety step. The company said this pause was not because user funds were missing or at risk.
Withdrawals Set To Resume In Stages
Bitget laid out a plan to bring withdrawals back online over several days. Bitcoin withdrawals were the first to reopen, starting September 28 at 08:00 UTC.
Ethereum withdrawals were scheduled to follow on September 29. USDT withdrawals were set for September 30.
All remaining tokens, along with fiat and peer-to-peer withdrawal options, were expected to be back by October 2. Bitget said the vulnerability used in the attack has already been found and fixed.
The exchange said its security team is running extra tests on the withdrawal system before each stage goes live. Bitget added that users won’t need to do anything themselves once withdrawals reopen.
Stablecoin issuers stepped in to help limit the damage. Circle and Tether froze funds tied to an address the exchange labeled “Bitget Exploiter 8.”
The frozen funds included 218,023 USDT and 99,990 USDC, worth about $318,000 combined. It is a small piece of the total loss, but Bitget’s CEO Gracy Chen thanked both companies for acting quickly.
Bitget also launched a recovery bounty program. It offers a discount to anyone who helps freeze or return the stolen funds.
The exchange said it has a Protection Fund worth more than $464 million to cover losses from the incident. This fund is meant to make sure customer balances stay unaffected.
Security firms Mandiant and SlowMist are assisting with the investigation into the breach. Chen has pointed to North Korea’s Lazarus Group as a possible suspect, a claim shared by some blockchain researchers.
Bitget has not confirmed who was responsible. The attribution is still under review as the investigation continues.
This breach ranks among the larger incidents in the crypto industry, though it remains smaller than the $1.5 billion Ether theft from Bybit in February 2025. Bitget says trading and deposits have continued to operate normally throughout the incident.
Stop guessing and start investing with confidence. KnockoutStocks gives you the AI insights, market intelligence, and stock research you need to spot opportunities, cut through the noise, and make smarter investment decisions — all in one powerful platform.
Sign up today and get 50% OFF full access to our premium stock picks.
Simply use coupon code SPECIAL50 at checkout to claim your exclusive discount.







