Bitget Hack Update: When Will Withdrawals Resume After $387M Hit?

Bitget Hack Update 2026: What Happened? When Will Withdrawals Restart?

Bitget Exchange found and fixed the bug behind its September 24 crypto hack. The exchange will bring back withdrawals in steps, starting September 28. Bitget also raised its loss estimate to about $387.5 million. The old number was $351.6 million. The new number counts Zcash and TRON assets that were missed at first.

At a Glance

• The exchange spotted the hack on September 24, 2026

• The bug is now fixed

• New loss estimate: about $387.5 million

• User balances are safe

• Withdrawals restart in steps from September 28

• Mandiant and SlowMist are helping with the probe

• Bitget started a bounty to help recover funds

Bitget Hack Update: Fixes Vulnerability After September 24 Security Incident

Bitget's security incident team caught bad transfers from a few hot wallets on September 24. This happened at about 18:31 UTC. The team acted fast. It turned on its emergency plan and began digging in. Most of the funds stayed safe. Cold wallets were not touched.

Since then, the team has found how the breach happened. They found the exact bug the attackers used. The bug is now fixed. The exchange also says the exploit is over. No more funds can be taken. Bitget exchange has not shared every detail yet. It says the probe is still open.

Source: Official Posts

Bitget Hack 2026: Loss Estimate Rises to $387.5 Million

At first, it was about $351.6 million that was hit. New checks raised that number to $387.5 million. This does not mean a new hack took place. The higher number just adds in assets on two chains: Zcash and TRON. Those were missed the first time.

The hack touched many chains. This includes Ethereum and other EVM chains, plus XRP, Zcash, and TRON.

Bitget Security Incident: Key Facts

Source: X

Bitget Withdrawal Restart Begins September 28

This is the part users care about most. The crypto exchnage paused withdrawals as a safety step. It says this was not because user funds were at risk. Withdrawals will come back in stages. Big coins go first.

Timeline: Bitget Withdrawal Restoration Schedule

• Sept 28, 8:00 UTC: BTC withdrawals return

• Sept 29, 8:00 UTC: ETH withdrawals return (Ethereum, BSC, Arbitrum, Base, Optimism)

• Sept 30, 8:00 UTC: USDT withdrawals return (Ethereum, BSC, Solana, Tron)

• Oct 2, 8:00 UTC: Other coins, cash, and P2P return

These times equal 4:00 PM Beijing time on each date. The trading and deposits work fine right now.

Mandiant and SlowMist Continue Bitget Hack Investigation

Mandiant and SlowMist are still on the case. They work with Bitget's own team. The team has traced the stolen funds. They found the wallets the hackers used. This spans EVM chains, XRP Ledger, Zcash, and TRON. Police are also involved now.

The loss number could shift again. More checks may turn up more facts. But it still says the hack is contained. No new theft has occurred since.

Source: X

Bitget Launches 5% Recovery Bounty Program

It wants help getting the stolen funds back. So it made a bounty plan. Anyone can join: exchanges, security experts, or everyday sleuths. Here's how it works:

• 5% of any frozen funds go to the person who helped freeze them

• 5% of any recovered funds go to the person who helped recover them

• The help must be voluntary, not court-ordered

• The exchange picks who gets paid and how much

• Bybit Lazarus Bounty tool will help run this effort

Circle and Tether Freeze $318,000 Linked to Bitget Hack

Stablecoin firms have also jumped in. CoinDesk reports that Circle and Tether froze one wallet tied to the crypto hack. That move locked up 218,023 USDT and 99,990 USDC. Together, that's about $318,000. Circle acted first, at 5:00 AM UTC on September 25. Tether followed soon after. MistTrack confirmed both moves.

This is a small piece of the total loss. MistTrack says other hacker wallets still hold over 63,000 ETH. Stablecoin firms can't freeze ETH the same way.

Source: Wu Blockchain

Binance CZ Responds to Bitget Hack

Binance founder Changpeng "CZ" Zhao publicly responded to the Bitget hack, calling it a tough day for the exchange. He said he expects Binance, the BNB Chain ecosystem, and the wider crypto community to help out however they can. CZ also reminded users to put safety first during the incident, closing his post with Binance's familiar "Stay SAFU" message.

Other exchange leaders echoed similar support. Bybit CEO Ben Zhou, Binance Co-CEO Richard Teng, MEXC CEO Vugar Usi, and CoinDCX co-founder Sumit Gupta all publicly offered assistance the same day, signaling a broader industry response to the hack beyond Bitget's own team.

Source: Binance CZ Tweet

What Users Need to Know Now

• Trading and deposits work as normal.

• Your balance is safe, per the exchange

• You don't need to do anything before withdrawals return

• Watch the Bitget app for withdrawal updates

• Follow Bitget's official pages for news

• Bitget Wallet is separate and was not affected by this hack

Conclusion

The crypto exchange fixed the bug from its September 24 hack. It will bring back withdrawals starting September 28. The loss estimate now stands near $387.5 million, mostly due to newly found Zcash and TRON funds.

Mandiant and SlowMist keep helping with the probe. Bitget's bounty plan and the Circle/Tether freeze mark early wins in getting funds back. Full recovery is still not certain.

YMYL Disclaimer: This article is for informational purposes only and is not financial advice. Crypto security incidents can change quickly. Readers should verify withdrawal status and new updates through Bitget's official channels before taking any action.