Bitget Reopens Withdrawals After $387.5 Million Hack: Timeline Revealed

Bitget has revised its estimate of the funds stolen in the September 24 hack to $387.5 million, and has set a precise schedule for the gradual reopening of withdrawals starting on September 28.

The exchange explained that the increase of around $35.9 million from the initial estimate of $351.6 million does not result from a new theft but rather from the inclusion of transfers on Zcash and TRON that were initially excluded from the original accounting of the incident.

Bitget has launched a program of rewards that can reach up to 10% of the recovered value, divided equally between those who contribute to blocking the funds of the attacker and those who actually recover them. Circle and Tether have already frozen around $320,000 in stablecoins linked to the attacker's address.

The exchange has published a precise calendar for the gradual reopening of withdrawals, which will begin with Bitcoin on September 28 at 8:00 UTC, followed by Ethereum on September 29, USDT on September 30, and other assets by October 2. The CEO Gracy Chen will also hold a public Q&A session thirty minutes before the reopening of Bitcoin withdrawals to update the community directly on the state of the investigation.

Bitget claims that the vulnerability exploited by the attacker was identified and already corrected, confirming what was stated in recent days: the attack compromised a backend system of the infrastructure, making appear as authorized transfers that were actually fraudulent without compromising private keys. However, the CEO has stated that she noticed IP addresses consistent with VPN services used in the past by a group linked to North Korea, an indication that remains a declared suspicion rather than a confirmed attribution, with the investigation still formally open.