Bitget Resumes BTC Withdrawals After $388M Hack
Bitget has resumed Bitcoin withdrawals four days after an exploit drained $388 million from its hot and warm wallets. The exchange restarted BTC withdrawals on September 28 at 08:00 UTC, while ETH withdrawals on Ethereum, BSC, Arbitrum, Base, and Optimism opened the following day. USDT withdrawals on these networks are due to follow on September 30.
The hack began around 18:31 UTC on September 24 across multiple networks, when an attacker exploited a vulnerability in a third-party security product to obtain high-level internal credentials. This allowed them to send fraudulent withdrawal commands that bypassed risk controls.
Bitget stated that private keys were not compromised and user balances and cold wallets remained unaffected. The exchange has confirmed $388 million as the total loss, making it the largest reported crypto theft of the year so far.