Bitget Reopens Bitcoin Withdrawals as Protection Fund BTC Moves

HACK OR EXPLOITBitget Reopens BitcoinWithdrawals as Protection FundBTC Moves48IMPORTANCECLOSED5NEWS MEDIA5PIECESSep 28, 2026 09:51blockboard.net

Bitget said its Sept. 24 security incident was tied to a third-party vulnerability, and later said attackers used stolen internal credentials to forge withdrawal requests while private keys and cold wallets were not affected. The exchange then isolated affected systems, repaired the vulnerability, and began restoring withdrawals in stages, starting with bitcoin on Sept. 28. Separate updates put the affected amount at about $387.5 million and described the withdrawal restart as the first step after the freeze.

What this rests on

Claim by claim, with its source
✓
Bitget said the first security incident in eight years was linked to a vulnerability in a third-party tool, and it said losses fall within its user protection fund.
✓
Bitget said the affected funds estimate had risen to about $387.5 million, and it said transfers from its protection fund to hot wallets were not customer withdrawals.
✓
The exchange later said attackers used stolen internal credentials to forge withdrawal commands, while private keys and cold wallets were not affected.
✓
Bitget restarted bitcoin withdrawals on Sept. 28, with ether, USDT and other services scheduled to follow in later steps through Oct. 2.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Before these steps, the exchange said it isolated affected systems, reissued internal credentials, and added independent verification for later withdrawals. In practice, that means the withdrawal process now includes extra checks that were not there before, while the exchange also said the private keys and cold wallets were not affected. What remains in place is the staged restart itself, with different assets returning on different dates rather than all at once. (per tokenpost.com)

Market reaction

BT Bitcoin the event is about this asset from 2 h before to 4 h after the line marks the first headline
published
-0.21 % before publication
+0.90 % after
$82,778price at publication
12series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 28 09:00
CN Crypto News Flash scoop
Breaks the event: $387.5M
+1 h 17 m
Sep 28 10:18
Unchained adds
Sharpens the figure: $388M, with quotes
+1 h 32 m
Sep 28 10:33
crypto.news echo
No new facts: services, return, $388m
+3 h 16 m
Sep 28 12:16
The Defiant echo
No new facts: approximately, estimates, involved; with quotes
+4 h 12 m
Sep 28 13:12
BeInCrypto echo
No new facts: infrastructure, interconnected, sophisticated

Thefts of a similar size

WhenWhat happenedFigure
3.9 years ago FTX · Phishing incident $450M
5.8 years ago OneCoin · Scam incident $440M
23 days ago Bitget incident $351.6M
4.7 years ago Portal · Signature Verification Flaw incident $326M
41 days ago Liquid Network incident $320M

4197 incidents stored · 20 were as large as this one or larger ($388M)

What could happen next

What the prediction markets currently price as likely. This is context, not a forecast of ours: there is money on it, and that is all we show.

2 % +1 pts
Kalshi · $4,415,187 of open interest · resolves on Jan 1, 2027
0 % no series
Kalshi · $1,148,516 of open interest · resolves on Oct 2, 2026
0 % no series
Kalshi · $1,135,683 of open interest · resolves on Oct 6, 2026
1 % no series
Kalshi · $1,022,099 of open interest · resolves on Oct 1, 2026