Bitget Suffers $387.5 Million Security Incident on September 24

Bitget, a cryptocurrency exchange, was hit by a security incident on September 24, 2026. At approximately 18:31 UTC, the company's security systems detected unauthorized transfers from a portion of its hot and warm wallet infrastructure across multiple chains.

An attacker compromised a critical backend system within the exchange's wallet infrastructure, used it to spoof transaction data, and triggered the authorization process for unauthorized transfers.

Bitget's security team identified the attack path and methods used to bypass existing security controls. The underlying vulnerability has been remediated, and no further unauthorized transfers have been identified following containment.

The incident affected approximately $387.5 million worth of assets across Ethereum and several EVM networks, XRP Ledger, Zcash, and TRON.