Bitget Exchange Wallet Breach
What happened
Bitget reported unauthorized transfers from its exchange hot wallets on September 24, 2026, at 18:31 UTC. Its initial notice estimated $351.6 million affected and announced a precautionary withdrawal pause. On September 25, Bitget revised the transferred-assets estimate to approximately $387.5 million, adding Zcash and TRON transfers to the accounting.
The company said the revision did not represent additional unauthorized transfers. These figures describe assets moved to attacker-controlled addresses; frozen assets are not necessarily recovered assets.
Bitget says it identified and remediated the vulnerability. The cited notices do not disclose enough technical detail to reconstruct the exploit sequence.
Protocol details
Post-Incident Timeline
-
2026-09-24
Bitget detected unauthorized wallet transfers, activated its emergency response, and temporarily suspended withdrawals.
-
2026-09-25
Bitget revised its estimate to $387.5 million and named Mandiant and SlowMist as investigation partners. It reported some assets frozen and announced a recovery bounty.
Evidence
- report @De_FiSecurity incident report x.com
- report @WuBlockchain incident report x.com
- report @SpecterAnalyst incident report x.com
- report @bitget incident report x.com
- analysis DeFiLlama defillama.com
- analysis Bitget: September 24 exchange wallet incident notice bitget.com
- analysis Bitget: September 25 fund tracing and recovery update bitget.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
