Bitget has begun the phased resumption of withdrawals following the security incident identified on September 24, with BTC withdrawals on the Bitcoin and BSC networks resuming at 08:00 UTC on September 28 as scheduled.
The resumption follows additional security work across Bitget’s withdrawal infrastructure. Earlier today, Bitget CEO Gracy Chen addressed the incident, the withdrawal process, and next steps during a live AMA.
The September 24 incident was the first security incident of this nature to affect Bitget Exchange in its eight years of operation.
The vulnerability has been remediated, and the incident remains contained, with no further unauthorized transfers identified following containment.
User account balances remain unaffected.
The security incident and response
Bitget has confirmed that approximately $388 million in assets were transferred out during the incident.
The figure reflects the latest reconciliation and classification of transactions associated with the original incident and does not represent additional unauthorized transfers following containment.
Mandiant and SlowMist continue to support the independent forensic investigation, including reviewing the attack vectors and methods used, validating containment and remediation measures, and supporting asset tracking.
Bitget is also working with law enforcement, exchanges, blockchain projects, on-chain security specialists, and other industry partners on tracing and recovery efforts.
Some affected assets have already been frozen through coordination with industry partners.
Bitget has also published identified attacker addresses and relevant tracing data to support industry collaboration and asset recovery.
Bitget expects to complete an official security report this week and will share further findings as they are verified.
The report will form part of a broader review of the incident and the measures being taken in response.
Security threats are expected to continue evolving alongside the digital asset industry.
Bitget’s response to the incident will therefore extend beyond remediation of the vulnerability itself.
The company will use the findings to strengthen its infrastructure and controls, review dependencies across its security architecture, and work with security firms and industry participants where broader coordination can help reduce similar risks.
Resumption timeline and additional measures
Following today’s resumption of BTC withdrawals across the Bitcoin and BSC networks, ETH withdrawals are scheduled to resume on September 29, USDT withdrawals on September 30, and other supported tokens, fiat, and P2P services on October 2.
Withdrawal availability will be reflected directly on the Bitget platform.
As of 09:00 UTC on September 28, Bitget had processed 9,585 BTC withdrawals across the Bitcoin and BSC networks, totaling approximately 4,098 BTC.
Separately, Bitget has introduced the limited-time Bitget Alliance Program for eligible users, running from September 28, 2026, at 10:00 UTC until October 30, 2026, at 09:00 UTC.
Bitget is also running Project Stand Together for eligible PRO clients and market makers, including temporary fee benefits and extended PRO-level protection.
Bitget will continue to provide material updates on withdrawal restoration, the forensic investigation, and asset recovery as information is verified.
The post Bitget begins phased withdrawal resumption after $388M security incident appeared first on Invezz
