Bitget Internal System Compromise: $387.50M Reported Loss
At 18:31 UTC on September 24, 2026, Bitget detected unauthorized transfers from parts of its hot and warm wallet infrastructure.
- Reported loss
- $ 387,500,000
- Attack category
- Internal System Compromise
Incident Overview
Attackers compromised a critical backend system in the wallet stack, spoofed transaction data, and triggered Bitget’s own authorization process to move funds out. The firm ruled out private-key theft and fake user withdrawal requests. The loss was first put at about $351,600,000 and later revised to about $387,500,000 after Zcash and TRON assets were included. Cold wallets and Bitget Wallet were unaffected. Withdrawals were paused, the User Protection Fund is said to cover the loss, and some attacker addresses have been frozen.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.