The Bitget $350 million hack has become one of the biggest cryptocurrency security incidents of 2026 after approximately $351.6 million in crypto assets were transferred without authorization from some of the exchange’s wallets. Bitget temporarily suspended customer withdrawals while its security teams investigated the incident, although the company said user account funds remained safe.
The incident immediately put attention back on one of cryptocurrency’s biggest problems: crypto exchange hack 2026 risks remain significant even as major exchanges invest heavily in security infrastructure.
According to Reuters, Bitget detected unauthorized transfers from some of its wallets on September 24 and temporarily stopped withdrawals as a precaution. CEO Gracy Chen said the company’s own funds would cover the loss and that the withdrawal suspension was not caused by a shortage of customer assets.
The incident raises a larger question for the crypto industry: how secure are centralized exchanges when attackers manage to bypass security controls?
What Happened in the Bitget Hack?
Bitget detected unusual activity on September 24 involving unauthorized transfers from a limited portion of its wallet infrastructure.
The company responded by activating its security procedures and temporarily suspending withdrawals.
The estimated value of the affected assets was approximately $351.6 million.
The size of the loss made the incident significant even by the standards of the cryptocurrency industry, where large exchange hacks have occurred repeatedly over the past decade.
However, Bitget emphasized that the stolen assets were not the same thing as customer account balances.
The company said user funds remained protected and that the financial loss fell within its protection arrangements.
Why Did Bitget Stop Withdrawals?
The withdrawal suspension was primarily a security measure.
When an exchange detects unauthorized transfers, allowing withdrawals to continue normally can create additional risks while investigators determine how the attacker gained access.
Bitget therefore temporarily restricted withdrawals while its technical and security teams examined the affected infrastructure.
The company said trading and deposits continued operating while the withdrawal system underwent additional security checks.
This distinction is important.
A withdrawal suspension does not automatically mean an exchange has become insolvent.
In Bitget’s case, the company specifically said the suspension was not caused by insufficient funds.
How Much Money Was Stolen?
The reported figure was approximately $351.6 million in cryptocurrency assets.
That amount makes the incident one of the larger crypto exchange security events of 2026.
The exact value of stolen cryptocurrency can change because digital assets trade continuously and prices fluctuate.
However, the reported figure provides an indication of the scale of the incident.
For a cryptocurrency company, a loss of hundreds of millions of dollars can have consequences far beyond the immediate financial damage.
It can affect customer confidence, security spending, regulatory scrutiny and perceptions of the wider crypto market.
Were Bitget Customers’ Funds Lost?
Bitget said customer funds were safe.
CEO Gracy Chen stated that the loss would be covered by Bitget’s own funds rather than being taken from customer balances.
The company also said its User Protection Fund was large enough to cover the reported loss.
That means the incident should be understood differently from a situation in which customers discover that their exchange accounts no longer contain the assets they previously held.
Still, customers naturally become concerned when withdrawals are suddenly unavailable.
For centralized exchanges, trust is a critical part of the business model.
Customers need confidence that they can deposit assets, trade them and withdraw them when required.
What Were the Attackers Able to Access?
Bitget initially described the incident as unauthorized transfers involving some of its wallets.
The company later said its investigation had identified the attack path and the methods used to bypass existing security controls.
Bitget reported that the underlying vulnerability had been identified and remediated.
The exchange also said that the incident had been contained and that no further unauthorized transfers were possible.
Security researchers and outside cybersecurity specialists were involved in the investigation.
Bitget said Mandiant and SlowMist were supporting its investigation and fund-tracing efforts.
The continuing investigation is important because identifying the exact attack path can help determine whether similar vulnerabilities exist elsewhere in the exchange’s infrastructure.
Why Hot Wallets Matter
The incident also highlights the importance of cryptocurrency wallet architecture.
Crypto exchanges generally use different types of wallets for different purposes.
Hot wallets remain connected to online systems and can be used to process transactions efficiently.
Cold storage, by contrast, keeps assets more isolated from internet-connected infrastructure.
This creates a difficult balance.
An exchange needs online liquidity to process customer transactions quickly, but online wallets can create additional security risks.
Bitget said its cold wallets remained secure during the incident.
That distinction demonstrates why exchanges separate their assets across different security layers.
The Bigger Problem With Crypto Exchange Hacks
The crypto exchange hack 2026 story is not an isolated event.
Cryptocurrency platforms have experienced major thefts for years.
The industry has attracted sophisticated attackers because digital assets can potentially be transferred quickly across borders and between different blockchain addresses.
Once cryptocurrency moves through multiple wallets, tracing it can become complicated.
Blockchain transactions are generally visible, but identifying the person controlling an address can be difficult.
That is why exchanges increasingly work with blockchain analytics companies, cybersecurity firms and law-enforcement agencies after major incidents.
Bitget Is Not the First Major Exchange to Face a Huge Theft
The scale of the Bitget incident can be compared with other major cryptocurrency thefts.
One of the most notable recent examples was the 2025 Bybit hack, in which approximately $1.5 billion in cryptocurrency was stolen.
The FBI attributed that attack to North Korean hackers, although North Korea has repeatedly denied involvement in cyberattacks and cryptocurrency thefts.
The comparison shows how quickly the financial impact of crypto attacks has grown.
The amounts involved are no longer measured only in millions of dollars.
Some attacks now involve hundreds of millions or even billions of dollars.
Why Crypto Can Be Attractive to Criminals
Cryptocurrency offers legitimate advantages, including fast transfers and global accessibility.
Those same characteristics can also create opportunities for criminals.
A stolen digital asset can potentially move through multiple blockchain addresses without going through the traditional banking system.
Authorities and blockchain investigators can track transactions on public networks, but criminals may attempt to complicate the trail by moving funds through different addresses, decentralized services or other mechanisms.
Recovering stolen assets is therefore a complicated process.
The Bitget investigation will likely involve both technical analysis and blockchain tracing.
What Bitget Did After the Attack
Bitget said it immediately activated its emergency response procedures after detecting unauthorized transfers.
The company identified and flagged relevant transfer addresses and said it had engaged law-enforcement agencies and blockchain security partners.
It also began investigating the attack path.
The company later announced that the underlying vulnerability had been identified and fixed.
Additional security validation was required before withdrawals could fully resume.
That process explains why the exchange did not immediately restore all withdrawal services.
Bitget Begins Phased Withdrawal Restoration
The story also changed after the initial September 25 report.
Bitget subsequently announced a phased plan for restoring withdrawals.
According to its official update, Bitcoin withdrawals were scheduled to resume on September 28, followed by Ethereum on September 29 and USDT on September 30.
Other tokens, fiat withdrawals and peer-to-peer services were scheduled for October 2.
The company said the phased approach was designed to allow additional security checks for different assets and networks.
This represents an important development because the original withdrawal suspension was not expected to remain permanent.
What Does the Hack Mean for Bitget Users?
For users, the biggest lesson is that exchange security and personal security are closely connected.
Keeping cryptocurrency on an exchange can be convenient, especially for people who trade frequently.
However, centralized platforms remain attractive targets for attackers.
Users should therefore pay attention to security features such as two-factor authentication, withdrawal controls, anti-phishing protections and account alerts.
Users should also be cautious about messages claiming to offer emergency refunds or compensation.
Major hacks often create opportunities for secondary scams.
Attackers may impersonate exchange employees and contact victims through social media, email or messaging applications.
Could This Affect Crypto Prices?
A major exchange hack can create short-term uncertainty, but it does not automatically mean the entire cryptocurrency market will collapse.
The impact depends on several factors.
These include the amount stolen, whether customer funds are affected, whether the exchange remains operational, whether stolen assets enter the market and whether other platforms experience related security problems.
In Bitget’s case, the company said customer funds remained safe and that its own protection arrangements would cover the loss.
That could limit the direct financial impact on customers.
Nevertheless, the incident adds to concerns about security across centralized cryptocurrency platforms.
What the Bitget Hack Says About Crypto Security
The Bitget $350 million hack highlights a difficult reality for the cryptocurrency industry.
Blockchain technology itself can provide transparent transaction records, but the companies that manage access to digital assets can still become targets.
Security therefore depends on much more than the blockchain.
It also depends on wallet architecture, private-key protection, backend systems, authentication procedures, monitoring tools and human decision-making.
A vulnerability in one part of that chain can potentially create enormous financial consequences.
Will Crypto Exchanges Become More Secure?
Major incidents usually accelerate investment in cybersecurity.
Exchanges have strong financial incentives to improve their systems because customer trust is directly connected to their survival.
Following a major breach, companies may increase spending on:
- Wallet security
- Transaction monitoring
- Multi-layer authentication
- Real-time anomaly detection
- Independent security audits
- Blockchain fund tracking
- Emergency response systems
- Cold-storage protections
However, security is an ongoing process.
Attackers also continuously develop new techniques.
That creates a permanent race between cryptocurrency platforms and cybercriminal groups.
The Bigger Lesson From the $350 Million Attack
The most important lesson is not simply that one cryptocurrency exchange lost hundreds of millions of dollars.
It is that digital-asset security remains a moving target.
Bitget responded by suspending withdrawals, investigating the affected systems and working with external cybersecurity specialists.
The company also said the vulnerability had been identified and fixed.
For the wider industry, the incident reinforces the importance of limiting the amount of cryptocurrency exposed to online systems and maintaining strong separation between customer assets and operational infrastructure.
Conclusion
The Bitget $350 million hack has become a major cryptocurrency security story after approximately $351.6 million in assets were transferred without authorization from some of the exchange’s wallets.
Bitget temporarily suspended withdrawals while investigating the incident, but the company said customer funds remained safe and that its own protection arrangements would cover the financial loss.
The exchange later said it had identified and remediated the underlying vulnerability and began preparing a phased return of withdrawal services.
The incident is another reminder that the cryptocurrency industry faces a continuing cybersecurity challenge.
Blockchain transactions may be highly visible, but the infrastructure surrounding digital assets can still contain vulnerabilities.
For exchanges, the pressure will now be on stronger wallet security, faster threat detection and greater transparency.
For users, the event provides another reason to treat cryptocurrency security seriously.
The crypto exchange hack 2026 trend is likely to remain an important issue as digital assets become more widely used and the financial value stored on crypto platforms continues to grow.
Frequently Asked Questions
What happened in the Bitget hack?
Bitget reported unauthorized transfers from some of its wallets on September 24, 2026. The company estimated that approximately $351.6 million in crypto assets were affected.
Was Bitget’s customer money stolen?
Bitget said customer funds were safe and that the loss would be covered by its own funds and protection arrangements.
Why did Bitget suspend withdrawals?
The exchange temporarily suspended withdrawals as a security precaution while its teams investigated the incident and completed additional security checks.
How much was stolen from Bitget?
The reported value of the affected assets was approximately $351.6 million.
Has Bitget fixed the security problem?
Bitget said it identified and remediated the underlying vulnerability and that the incident had been contained.
When did Bitget resume withdrawals?
Bitget announced a phased withdrawal restoration beginning September 28, with different assets and services scheduled to return over subsequent days.
Is the Bitget hack the largest crypto hack ever?
No. Other cryptocurrency attacks have involved substantially larger amounts. The 2025 Bybit hack, for example, involved approximately $1.5 billion in stolen cryptocurrency.
, , , ,, , , , , , , , ,
