Bitget Restarts Withdrawals in Phases After $388M Security Breach

# What happened On September 24, Bitget experienced an unauthorized transfer of roughly $388 million in crypto assets. The exchange says the attacker obtained high-level internal credentials by exploiting a vulnerability in a third-party security product. Those credentials were then used to submit fraudulent withdrawal commands that bypassed automated risk filters. Bitget reports that private keys were not exposed and cold wallets remained intact.

# How withdrawals are being restored Bitget has implemented a phased reopening to control traffic and confirm system stability. The publicly stated schedule is:

• Sept. 28: Bitcoin (BTC) withdrawals on Bitcoin mainnet and Binance Smart Chain (BSC) resumed. Within the first hour, 9,585 withdrawal orders totaling about 4,098.036 BTC were processed.
• Sept. 29: Ethereum (ETH) scheduled to resume.
• Sept. 30: Tether (USDT) scheduled to resume.

# Security response and forensic work

# Financial backing and coverage for users To reassure users, Bitget disclosed its financial protections: a User Protection Fund of over $464 million and a proof-of-reserves ratio reported at 127%. The company says these measures support solvency and asset coverage while investigations continue.

# Customer support and retention measures Bitget announced several programs aimed at stabilizing liquidity and rewarding users during recovery:

• Bitget Alliance Program: runs Sept. 28 to Oct. 30, offering rewards and special terms for eligible retail users.
• Project Stand Together: targeted at institutional accounts, market makers, and PRO clients, providing temporary fee discounts and extended PRO status protections.

# What remains unresolved Bitget's public account describes containment and remediation steps, but the forensic process is ongoing. The firm will publish a complete incident report when investigations by the retained cybersecurity teams finish. The exchange is coordinating legal and on-chain recovery efforts, and monitoring for any further unauthorized activity.

# Bottom line Bitget has resumed withdrawals in stages while external forensics verify the fix and trace funds. The exchange says core vaults and cold storage were not compromised and that financial protections are in place to cover user assets. Users should monitor official Bitget notices for precise timing and network availability as the phased schedule continues.