$351.6 Million in Assets Issues, What Happened with Bitget?

On September 24, cryptocurrency exchange Bitget experienced abnormal wallet transfers.

Bitget subsequently confirmed that approximately $351.6 million in assets were affected by a security incident.

Based on the currently disclosed information, the issues mainly focus on certain hot wallets and warm wallets.

Bitget stated that its cold wallets were not affected, and user funds are still safe.

At the same time, the platform temporarily suspended withdrawal functions, but deposit and trading functions remain normal. Bitget said that the security team has initiated an emergency response and contacted law enforcement and blockchain security agencies to intervene in the investigation.

The question arises:

If user funds are safe, why suspend withdrawals?

The answer is actually quite understandable.

After a security incident occurs, the exchange must first confirm whether abnormal transfers have completely stopped while checking wallet permissions, systems, and related addresses.

Thus, suspending withdrawals is more of a risk isolation measure.

Why are hot wallets more susceptible to attacks?

This incident has a crucial keyword:

Hot wallets.

In simple terms, a hot wallet is a wallet connected to the internet.

Exchanges routinely handle user deposits, withdrawals, and asset management using some hot wallets.

The advantage is convenience and high efficiency.

But therein lies the problem:

As long as it is connected to the internet, it means there is a possibility of being attacked.

Cold wallets, on the other hand, are different.

Cold wallets are usually isolated from networked systems, meaning their private keys are not directly exposed in online environments, thus offering higher security, though fund management efficiency is lower.

Bitget stated that in its three-tier wallet architecture, the affected portions were from certain hot wallets and warm wallets, while the cold wallets remained secure.

So this incident serves as a reminder to the market:

The true security of an exchange is not just whether there are cold wallets, but whether the entire wallet permissions, private key management, and risk control system can withstand attacks.

📌 If you want to continuously track the impact of BTC, ETH, and macro data on the market, you can follow the public account "Crypto Lao Ding," which explains daily important market changes and the logic behind them.

$351.6 Million Loss, Why Don't Users Have to Bear It Temporarily?

This is one of the most concerning questions regarding this incident.

Bitget stated that its user protection fund currently exceeds $464 million, which is enough to cover the approximately $351.6 million that has been affected.

That is to say, according to Bitget's currently published plan, even if this portion of assets is ultimately confirmed unable to be recovered, the platform has stated that the protection fund will bear the related risks.

Of course, it is necessary to distinguish between two concepts:

"The platform promises user fund security" does not equal "The cause of the attack has been clarified."

Currently, Bitget has not published a complete accident report.

The company stated that a complete report including the root cause analysis and remedial measures will be published within 24 hours.

So the most important information right now remains:

The scale of the loss has been confirmed, but the attack path and ultimate responsibility have not yet been fully determined.

Why is this incident worth the attention of the entire Crypto market?

Because this is no longer just a problem for one exchange.

Over the past few years, the Crypto industry has been emphasizing a concept:

Institutionalization.

More and more traditional financial institutions are entering the crypto market, and exchanges, custodians, ETFs, and stablecoin infrastructure are continuously developing.

However, at the same time, the larger the asset scale, the greater the impact of security issues.

A few million dollars in attacks may just be a security incident for a single platform.

But if an attack involves hundreds of millions of dollars, it will start to affect market trust regarding:

Exchange security, asset custody, proof of reserves, and platform risk control capabilities.

Especially given the currently sensitive state of the Crypto market, a large-scale security incident at an exchange could further amplify market risk sentiment.

Does having proof of reserves mean absolute safety?

It is also necessary to separate two concepts here.

Bitget’s latest proof of reserves announced on September 17 shows that the total reserve ratio is 135%, covering a total of 19 asset types.

However, Proof of Reserves addresses the issue of "does the platform have sufficient assets to support user assets."

Whereas hacking addresses another issue:

Are these assets' access permissions and operating systems actually secure?

In other words:

Sufficient reserves do not mean the wallet system will not be attacked.

This is why the industry is increasingly focusing not only on asset reserves but also on:

Private key management, permission control, hot and cold wallet isolation, abnormal transaction monitoring, and emergency response capabilities.

📌 If you want to continuously track the impact of BTC, ETH, and macro data on the market, you can follow the public account "Crypto Lao Ding," which explains daily important market changes and the logic behind them.

What should ordinary users truly focus on?

Upon seeing exchanges experience hacking incidents, many people's first reaction is:

"Are all exchanges unsafe?"

In fact, it is unnecessary to interpret it so simply.

What is more important is to look at several indicators.

First, does the platform have clear proof of reserves?

Second, is there a clear separation mechanism between user assets and the platform's own assets?

Third, does the platform have an emergency protection fund?

Fourth, is the hot and cold wallet and permission management transparent?

Fifth, after a security incident occurs, can the platform quickly suspend risky operations and publicly disclose the cause of the incident?

These indicators are often more important than simply looking at the scale of the exchange.

What is truly worth paying attention to next?

First, the accident report that Bitget ultimately publishes.

Second, how much of the $351.6 million in assets can actually be recovered.

Third, what the specific attack path is.

Fourth, when the withdrawal function will be restored.

Fifth, how Bitget will conduct system rectification, and whether it will further enhance the transparency of wallet and permission management.

For the entire Crypto industry, this incident also reiterates:

As asset scales grow, the importance of security infrastructure will not decrease; rather, it will only increase.

📌Mr. Web3 X: $351.6 Million is Just a Number; What Matters is the Exchange's Security System

This Bitget incident, on the surface, appears to be a large-scale hacking attack.

But what is truly worth contemplating for the industry is:

How can an exchange prove it is not only "wealthy" but also "can secure that wealth."

Proof of reserves addresses the question of whether assets are adequately supported, while the protection fund addresses whether there is an additional buffer after losses occur.

And wallet security, private key management, and permission control determine:

Whether these assets can actually be kept securely on the platform.

Currently, Bitget has stated user funds are safe, but a complete accident report will need to be awaited to gain clearer insight into how this security incident occurred and how the platform will be rectified afterwards.

—— I am Mr. Web3 X, with 6 years of growth in Web3, focusing on Bitcoin, crypto markets, macroeconomics, and industry trends. If you want to continuously track the impact of BTC, ETH, HYPE, and macro data on the market, you can follow the public account "Crypto Lao Ding." Understand the hot topics, grasp the logic, and build your own judgment instead of just focusing on price fluctuations.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。