Bitget Encountered $350 Million Attack, 2026's Largest-scale Crypto Hacking Incident, Exchange Security Back in Focus
Summary:
Bitget confirmed on September 24 that it experienced a large-scale security incident, with unauthorized asset transfers occurring in some hot and warm wallets, involving an amount of approximately $351.6 million. Although Bitget stated that cold wallets remain secure, user asset losses are covered by a user protection fund exceeding $464 million, but the withdrawal function is currently still paused, and the specific cause of the attack has not yet been disclosed. This incident not only became one of the largest crypto attacks since 2026 but also once again brought the asset custody and security risks of centralized exchanges to the forefront of market attention.
Bitget Confirms $350 Million Asset Attack
On September 24, on-chain monitoring institutions first discovered a large number of wallets marked as Bitget undergoing abnormal fund transfers.
According to Bitget’s official announcement, the exchange detected unauthorized asset transfers from certain hot wallets at 18:31 UTC and immediately initiated an emergency response mechanism. The final confirmed affected asset scale is approximately $351.6 million.
From on-chain data, the abnormal transfers involved ETH, USDT, USDC, BNB, AVAX, and other assets, with some funds subsequently transferred to newly created wallet addresses and exchanged and moved through on-chain transactions.
Early on-chain monitoring data showed that approximately $180 million worth of assets was transferred out of Bitget-related wallets in less than an hour, including a large number of mainstream assets like ETH.
This is why this incident quickly escalated from an ordinary on-chain anomaly to a significant security event attracting the entire crypto market's attention.
Cold Wallets Not Affected, But Withdrawals Temporarily Paused
A very important piece of information in this incident is that Bitget stated its cold wallets remain secure.
Bitget currently employs a multi-layer wallet architecture; this incident mainly involves certain hot and warm wallets and did not affect cold wallets. The official also stated that user account balances remain accurate, deposits and trading functions continue to operate, but the withdrawal function is temporarily paused pending the completion of a security review.
For the exchange, this means that the most important issue has shifted from "whether funds will continue to flow out" to "what the attack entry point is and when withdrawals can be restored."
Bitget stated that it has identified and marked the related abnormal addresses and notified law enforcement agencies and on-chain security companies to participate in the investigation.
The official also stated that before the complete investigation results are released, there will be no speculation on the attack method, and plans to issue a complete incident report that includes a root cause analysis and remedial measures.
Who Will Bear the $350 Million Loss?
This may be one of the questions the market is currently most concerned about.
Bitget CEO Gracy Chen stated that the entire loss amount is covered by the platform's user protection fund, which currently exceeds $464 million.
In other words, based on the information released by Bitget so far, the platform does not require users to bear the losses caused by this security incident.
However, this does not mean the incident has no impact on the platform.
Because in addition to addressing the stolen assets, the exchange must also face a series of issues such as withdrawal suspensions, user confidence, subsequent security reviews, and liquidity management.
Therefore, the situation regarding the resumption of withdrawals and the platform's financial status in the next few hours or even days still deserves close observation.
Why Should This Incident Be of Concern to the Whole Market?
In the past few years, the crypto market has experienced several large-scale attacks on exchanges and protocols.
The reason this Bitget incident has received such high attention is partly due to the amount exceeding $350 million, and partly because the funds are directly related to the wallet system of centralized exchanges.
For ordinary users, the greatest convenience of exchanges is the ability to trade, deposit and withdraw assets quickly, but at the same time, users are effectively entrusting the security of asset custody to the platform.
Once an exchange's hot wallet suffers an attack, users will face a chain reaction such as withdrawal suspensions.
From this perspective, this incident again reminds the market:
The safety of exchanges is not only a technical issue but also directly impacts user asset liquidity and market confidence.
Will This Further Impact BTC and the Crypto Market?
Currently, more attention needs to be paid to the emotional short-term effects, rather than simply equating this incident with an overall deterioration in market fundamentals.
Bitget itself is a centralized trading platform, and this attack primarily targeted certain wallets of the platform, which does not imply that the underlying blockchain networks like BTC and ETH itself have security issues.
Therefore, if Bitget can smoothly complete the security review and restore withdrawals later, while the user protection fund can cover the losses according to official commitments, then the event's impact on the overall market may gradually revert from "exchange security risk" to a single platform incident.
However, if the resumption of withdrawals is significantly delayed, or subsequent investigations reveal that actual losses have further expanded, then concerns over the risks of centralized exchanges may rise again.
Especially in cases where the market itself is highly volatile, security events at exchanges can easily amplify investors' risk aversion sentiment.
2026 Crypto Security Events Escalate Again
Following this incident, September has become a month with severe security losses in the 2026 crypto market.
Statistics from CryptoSlate show that if Bitget's loss of approximately $351.6 million is included, the reported crypto attack losses in September have exceeded $684 million, surpassing April's approximately $646.9 million.
This indicates that the security risks faced by the crypto industry this year are still not significantly reduced.
Moreover, the targets of attacks are becoming increasingly complex, ranging from DeFi protocols to cross-chain infrastructures and to centralized exchanges, as attackers continuously search for breakthrough points to quickly transfer large amounts of assets.
Therefore, for exchanges, the user protection fund can only solve the question of "what to do after the loss occurs." What truly determines the long-term safety of the platform remains the wallet architecture, permission management, risk control systems, and abnormal transaction monitoring.
Three Signals to Focus on Next
First, when will Bitget resume withdrawals
This is currently the most direct market sentiment indicator. If the security review is completed smoothly, the resumption of withdrawals can reduce user panic.
Second, what will the complete investigation report reveal
Currently, Bitget has not disclosed the specific attack path, so subsequent root cause analysis is crucial. If the source of vulnerabilities and remedial measures can be clearly identified, the market can further judge whether risks have been controlled.
Third, whether the user protection fund can successfully cover the losses
Bitget has clearly stated that its user protection fund of over $464 million can cover the incident's loss of approximately $351.6 million, so the situation regarding subsequent fund management deserves ongoing attention.
Conclusion
The incident involving Bitget’s approximate $351.6 million security event is one of the largest hacking attacks in the crypto market in 2026.
Current known information indicates that the attack mainly affected certain hot and warm wallets, that cold wallets remain secure, that Bitget has temporarily paused withdrawals, and that the losses will be covered by a user protection fund exceeding $464 million.
In the short term, the market needs to focus not just on the figure of $350 million but on three questions:
When will withdrawals be restored
What is the actual entry point of the attack
How will the user protection fund handle the losses
If subsequent investigations go smoothly, withdrawals are restored, and user assets are fully protected, the event's impact on the market may gradually diminish.
However, before the complete investigation results are released, exchange security risks remain a key variable that the current crypto market needs to focus on.
Follow our official account for daily market analysis, news, and practical insights
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
