Bitget, the Seychelles-based exchange that ranks sixth by daily trading volume, disclosed that unauthorized transfers totalling an estimated $351.6 million were detected from its hot wallets on September 24, 2026.
Incident timeline and response
At 18:31 UTC on the day of the breach, Bitget’s internal security systems flagged anomalous activity originating from several hot wallets. The company’s chief executive, Gracy Chen, announced on X that the security team immediately enacted emergency response protocols. In a subsequent statement, Chen emphasized that the exchange’s cold-wallet reserves remained secure and that the incident was confined to a portion of the hot and warm wallet layers within Bitget’s three-tier architecture.
Scope of the loss
Blockchain analytics firm Arkham Intelligence quickly published a dashboard showing that a variety of assets, including major stablecoins, had been moved from the compromised wallets. While Arkham’s initial data did not list Bitcoin, another security firm, Hacken, later reported that Bitcoin had also been transferred. The exact composition of the stolen funds has not been fully disclosed, but the total value approaches $352 million.
Operational impact
Following the detection, Bitget kept its deposit and trading services operational but temporarily suspended all withdrawals. The exchange said the pause would remain in effect until a comprehensive security review is completed and any necessary remediation steps are taken.
Context within a turbulent security landscape
The Bitget incident arrives amid a series of high-profile crypto security breaches in 2026. In July, a firmware vulnerability in the Coldcard hardware wallet was exploited to siphon roughly $120 million from users. Earlier this month, individuals identifying as white-hat hackers withdrew about 4,000 BTC—valued at approximately $320 million—from Blockstream’s Liquid sidechain federation wallet. These events have amplified concerns over the robustness of custodial solutions across the industry.
Next steps for Bitget and its users
Bitget’s leadership has pledged full transparency and accountability, stating that every decision and dollar will be accounted for. The exchange is expected to collaborate with external forensic investigators and security specialists to trace the stolen assets and assess the breach’s root cause. Users are advised to monitor official communications for updates on the withdrawal suspension and any potential remediation measures.
Why it matters
The suspected hack underscores the persistent vulnerabilities inherent in hot-wallet operations, even for large, established exchanges. As crypto adoption grows, the incident highlights the critical need for layered security architectures and rapid incident response capabilities. The temporary withdrawal freeze also illustrates how security breaches can directly affect market liquidity and user confidence, potentially prompting broader industry scrutiny of custodial practices.
