Bitget Resumes Bitcoin Withdrawals Following $387.5M Breach

Bitget's Bitcoin withdrawal service resumed on September 28 after being suspended for four days following a $387.5m breach. The incident occurred when unauthorized transfers were made from part of its hot and warm wallet infrastructure.

The exchange attributed the vulnerability to a third-party security product that provided high-level internal credentials, which attackers used to send fraudulent withdrawal commands bypassing risk controls.

Bitget's investigation found that the attack path had been identified and the underlying vulnerability fixed. The company said it would review how it assesses and deploys third-party security products.