Bitget Hack Update 2026: What Happened? When Will Withdrawals Restart? Bitget Exchange found and fixed the bug behind its September 24 crypto hack. The exchange will bring back withdrawals in
Bitget Exchange found and fixed the bug behind its September 24 crypto hack. The exchange will bring back withdrawals in steps, starting September 28. Bitget also raised its loss estimate to about $387.5 million. The old number was $351.6 million. The new number counts Zcash and TRON assets that were missed at first.
At a Glance
The exchange spotted the hack on September 24, 2026
The bug is now fixed
New loss estimate: about $387.5 million
User balances are safe
Withdrawals restart in steps from September 28
Mandiant and SlowMist are helping with the probe
Bitget started a bounty to help recover funds
Bitget's security incident team caught bad transfers from a few hot wallets on September 24. This happened at about 18:31 UTC. The team acted fast. It turned on its emergency plan and began digging in. Most of the funds stayed safe. Cold wallets were not touched.
Since then, the team has found how the breach happened. They found the exact bug the attackers used. The bug is now fixed. The exchange also says the exploit is over. No more funds can be taken. Bitget exchange has not shared every detail yet. It says the probe is still open.
Source: Official Posts
Bitget Hack 2026: Loss Estimate Rises to $387.5 MillionAt first, it was about $351.6 million that was hit. New checks raised that number to $387.5 million. This does not mean a new hack took place. The higher number just adds in assets on two chains: Zcash and TRON. Those were missed the first time.
The hack touched many chains. This includes Ethereum and other EVM chains, plus XRP, Zcash, and TRON.
Bitget Security Incident: Key Facts
Item
Details
Date
September 24, 2026
First estimate
~$351.6 million
New estimate
~$387.5 million
Newly added
ZEC and TRON
Assets hit
XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX, TRX
User funds
Safe
Protection Fund
Over $464 million at first report
Helping with probe
Mandiant, SlowMist
This is the part users care about most. The crypto exchnage paused withdrawals as a safety step. It says this was not because user funds were at risk. Withdrawals will come back in stages. Big coins go first.
Timeline: Bitget Withdrawal Restoration Schedule
Sept 28, 8:00 UTC: BTC withdrawals return
Sept 29, 8:00 UTC: ETH withdrawals return (Ethereum, BSC, Arbitrum, Base, Optimism)
Sept 30, 8:00 UTC: USDT withdrawals return (Ethereum, BSC, Solana, Tron)
Oct 2, 8:00 UTC: Other coins, cash, and P2P return
These times equal 4:00 PM Beijing time on each date. The trading and deposits work fine right now.
Mandiant and SlowMist Continue Bitget Hack InvestigationMandiant and SlowMist are still on the case. They work with Bitget's own team. The team has traced the stolen funds. They found the wallets the hackers used. This spans EVM chains, XRP Ledger, Zcash, and TRON. Police are also involved now.
The loss number could shift again. More checks may turn up more facts. But it still says the hack is contained. No new theft has occurred since.
Source: X
Bitget Launches 5% Recovery Bounty ProgramIt wants help getting the stolen funds back. So it made a bounty plan. Anyone can join: exchanges, security experts, or everyday sleuths. Here's how it works:
5% of any frozen funds go to the person who helped freeze them
5% of any recovered funds go to the person who helped recover them
The help must be voluntary, not court-ordered
The exchange picks who gets paid and how much
Bybit Lazarus Bounty tool will help run this effort
Stablecoin firms have also jumped in. CoinDesk reports that Circle and Tether froze one wallet tied to the crypto hack. That move locked up 218,023 USDT and 99,990 USDC. Together, that's about $318,000. Circle acted first, at 5:00 AM UTC on September 25. Tether followed soon after. MistTrack confirmed both moves.
This is a small piece of the total loss. MistTrack says other hacker wallets still hold over 63,000 ETH. Stablecoin firms can't freeze ETH the same way.
Source: Wu Blockchain
Binance CZ Responds to Bitget HackBinance founder Changpeng "CZ" Zhao publicly responded to the Bitget hack, calling it a tough day for the exchange. He said he expects Binance, the BNB Chain ecosystem, and the wider crypto community to help out however they can. CZ also reminded users to put safety first during the incident, closing his post with Binance's familiar "Stay SAFU" message.
Other exchange leaders echoed similar support. Bybit CEO Ben Zhou, Binance Co-CEO Richard Teng, MEXC CEO Vugar Usi, and CoinDCX co-founder Sumit Gupta all publicly offered assistance the same day, signaling a broader industry response to the hack beyond Bitget's own team.
Source: Binance CZ Tweet
What Users Need to Know NowTrading and deposits work as normal.
Your balance is safe, per the exchange
You don't need to do anything before withdrawals return
Watch the Bitget app for withdrawal updates
Follow Bitget's official pages for news
Bitget Wallet is separate and was not affected by this hack
The crypto exchange fixed the bug from its September 24 hack. It will bring back withdrawals starting September 28. The loss estimate now stands near $387.5 million, mostly due to newly found Zcash and TRON funds.
Mandiant and SlowMist keep helping with the probe. Bitget's bounty plan and the Circle/Tether freeze mark early wins in getting funds back. Full recovery is still not certain.
YMYL Disclaimer: This article is for informational purposes only and is not financial advice. Crypto security incidents can change quickly. Readers should verify withdrawal status and new updates through Bitget's official channels before taking any action.
