Digital asset exchange Bitget temporarily suspended user withdrawals following the detection of unauthorized transfers totaling an estimated $351.6 million from its hot wallets. The incident occurred at 18:31 UTC on September 24, 2026, when the platform’s security systems identified suspicious activity, prompting an immediate emergency response. CEO Gracy Chen confirmed that while deposits and trading remain operational, withdrawals are paused pending a comprehensive security review. Chen emphasized that the breach was contained to portions of the hot and warm wallet layers within the exchange’s three-tier architecture, asserting that cold wallets remained fully secure and user funds were safe.
Based in Victoria, Seychelles, Bitget ranks as the sixth-largest cryptocurrency exchange by volume, processing over $1.1 billion daily according to CoinGecko data. Blockchain analytics firm Arkham Intelligence launched a dashboard tracking the outflow of various cryptocurrencies, including stablecoins, though initial reports omitted Bitcoin. Security firm Hacken subsequently clarified that Bitcoin had also been moved. This event follows a series of high-profile crypto security breaches in 2026, including a July firmware exploit targeting Coldcard hardware wallets that resulted in nearly $120 million in losses, and a recent withdrawal of approximately 4,000 bitcoins worth about $320 million from Blockstream’s Liquid sidechain federation wallet.
The suspension of withdrawals at Bitget highlights the persistent vulnerability of centralized exchanges despite established multi-layered security architectures. While the exchange asserts that cold storage remains untouched, the movement of $351.6 million indicates a significant compromise in the hot and warm wallet infrastructure, which typically holds assets for immediate liquidity needs. This incident underscores the operational risk inherent in maintaining large balances in online-accessible environments, particularly for platforms handling over $1 billion in daily trading volume. The reliance on emergency protocols suggests that automated detection systems triggered before total depletion, yet the scale of the loss raises questions about the efficacy of real-time monitoring against sophisticated unauthorized access methods.
From a market structure perspective, this breach occurs amidst heightened scrutiny of crypto custody solutions following multiple 2026 incidents involving major entities like Coldcard and Blockstream. The transparency promised by CEO Gracy Chen regarding every dollar accounted for will be critical in maintaining institutional confidence, especially given the exchange's ranking among the top six global platforms. Investors and users must now assess whether the temporary halt is sufficient to prevent further contagion or if it signals deeper systemic issues within the exchange's compliance and security frameworks. The eventual resolution and potential compensation mechanisms will serve as a benchmark for how mid-to-large tier exchanges manage post-breach liability and regulatory expectations.
