hack or exploit

Bitget Reopens Bitcoin Withdrawals as Protection Fund BTC Moves

22Importance
closedStatus
5News media
5Pieces
Published
Updated
Since then
4 new reports
Also mentions
ETHUSDT

Bitget said its Sept. 24 security incident was tied to a third-party vulnerability, and later said attackers used stolen internal credentials to forge withdrawal requests while private keys and cold wallets were not affected. The exchange then isolated affected systems, repaired the vulnerability, and began restoring withdrawals in stages, starting with bitcoin on Sept. 28. Separate updates put the affected amount at about $387.5 million and described the withdrawal restart as the first step after the freeze.

Key claims & sources

✓
Bitget said the first security incident in eight years was linked to a vulnerability in a third-party tool, and it said losses fall within its user protection fund.
✓
Bitget said the affected funds estimate had risen to about $387.5 million, and it said transfers from its protection fund to hot wallets were not customer withdrawals.
✓
The exchange later said attackers used stolen internal credentials to forge withdrawal commands, while private keys and cold wallets were not affected.
✓
Bitget restarted bitcoin withdrawals on Sept. 28, with ether, USDT and other services scheduled to follow in later steps through Oct. 2.

What it means

Before these steps, the exchange said it isolated affected systems, reissued internal credentials, and added independent verification for later withdrawals. In practice, that means the withdrawal process now includes extra checks that were not there before, while the exchange also said the private keys and cold wallets were not affected. What remains in place is the staged restart itself, with different assets returning on different dates rather than all at once. (per tokenpost.com)

Market reaction i

BitcoinBTC the event is about this asset
first headline
-0.2% 2 h before
+0.9% 4 h after
$82,778price at publication
12data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 28 09:00
Crypto News Flash scoop
Breaks the event: $387.5M
+1 h 17 m
Sep 28 10:18
Unchained adds
Sharpens the figure: $388M, with quotes
+1 h 32 m
Sep 28 10:33
crypto.news echo
No new facts: services, return, $388m
+3 h 16 m
Sep 28 12:16
The Defiant echo
No new facts: approximately, estimates, involved; with quotes
+4 h 12 m
Sep 28 13:12
BeInCrypto echo
No new facts: infrastructure, interconnected, sophisticated

Thefts of a similar size

WhenWhat happenedFigure
4.0 years ago FTX · Phishing incident $450M
5.9 years ago OneCoin · Scam incident $440M
44 days ago Bitget · Internal system compromise incident $351.6M
4.8 years ago Portal · Signature Verification Flaw incident $326M
2 months ago Liquid Network · Unbacked Cross-Chain Mint incident $320M

4282 incidents stored · 22 were as large as this one or larger ($388M)