Bitget has begun restoring crypto withdrawal services following a security incident on September 24 that resulted in approximately $388 million in unauthorized transfers. The exchange confirmed that Bitcoin and Binance Smart Chain withdrawals were resumed on September 28, while Ethereum withdrawals are scheduled to reopen on September 29 and Tether on September 30. Other tokens, fiat, and P2P services will be re-enabled on October 2.
The attack exploited a third-party security tool to access high-level internal credentials, allowing counterfeit withdrawals that bypassed risk controls. Bitget stated that private keys remained secure and cold wallets were unaffected. Forensic investigations by Mandiant and SlowMist are ongoing, alongside asset tracing efforts with law enforcement and industry partners. As of September 28, the platform processed 9,585 Bitcoin withdrawals totaling about 4,098 BTC. Bitget reports a comprehensive reserve ratio of 127% and a User Protection Fund exceeding $464 million.
The resumption of withdrawals signals operational stabilization for Bitget, yet the reliance on third-party security tools highlights persistent vulnerabilities in exchange infrastructure. By isolating the breach to credential exploitation rather than key compromise, the platform mitigated systemic risks to user assets, preserving confidence through its reported reserve ratios and protection funds. This distinction is critical for institutional clients assessing counterparty risk during post-incident recovery phases.
Market structure implications extend beyond immediate liquidity restoration. The phased reopening of specific networks demonstrates a controlled approach to managing potential secondary attacks or further anomalies. Continued coordination with forensic firms and law enforcement suggests a focus on asset recovery, which may influence future regulatory expectations regarding incident response protocols. Stakeholders should monitor the upcoming official security report for insights into remediation measures and long-term compliance adjustments.
