Bitget has begun the phased resumption of withdrawals following the security incident identified on September 24, with BTC withdrawals on the Bitcoin and BSC networks resuming at 08:00 UTC on September 28 as scheduled.
The resumption follows additional security work across Bitget’s withdrawal infrastructure. Earlier today, Bitget CEO Gracy Chen addressed the incident, the withdrawal process, and next steps during a live AMA.
The September 24 incident was the first security incident of this nature to affect Bitget Exchange in its eight years of operation.
The vulnerability has been remediated, and the incident remains contained, with no further unauthorized transfers identified following containment.
User account balances remain unaffected.
The security incident and response
Bitget has confirmed that approximately $388 million in assets were transferred out during the incident.
The figure reflects the latest reconciliation and classification of transactions associated with the original incident and does not represent additional unauthorized transfers following containment.
Mandiant and SlowMist continue to support the independent forensic investigation, including reviewing the attack vectors and methods used, validating containment and remediation measures, and supporting asset tracking.
Bitget is also working with law enforcement, exchanges, blockchain projects, on-chain security specialists, and other industry partners on tracing and recovery efforts.
Some affected assets have already been frozen through coordination with industry partners.
Bitget has also published identified attacker addresses and relevant tracing data to support industry collaboration and asset recovery.
Bitget expects to complete an official security report this week and will share further findings as they are verified.
The report will form part of a broader review of the incident and the measures being taken in response.
Security threats are expected to continue evolving alongside the digital asset industry.
Bitget’s response to the incident will therefore extend beyond remediation of the vulnerability itself.
The company will use the findings to strengthen its infrastructure and controls, review dependencies across its security architecture, and work with security firms and industry participants where broader coordination can help reduce similar risks.
Resumption timeline and additional measures
Following today’s resumption of BTC withdrawals across the Bitcoin and BSC networks, ETH withdrawals are scheduled to resume on September 29, USDT withdrawals on September 30, and other supported tokens, fiat, and P2P services on October 2.
Withdrawal availability will be reflected directly on the Bitget platform.
As of 09:00 UTC on September 28, Bitget had processed 9,585 BTC withdrawals across the Bitcoin and BSC networks, totaling approximately 4,098 BTC.
Separately, Bitget has introduced the limited-time Bitget Alliance Program for eligible users, running from September 28, 2026, at 10:00 UTC until October 30, 2026, at 09:00 UTC.
Bitget is also running Project Stand Together for eligible PRO clients and market makers, including temporary fee benefits and extended PRO-level protection.
Bitget will continue to provide material updates on withdrawal restoration, the forensic investigation, and asset recovery as information is verified.
ETH inflows exceed outflows following withdrawal resumption
Following the resumption of ETH withdrawals on September 29, activity on Bitget has remained balanced, with inflows exceeding outflows during the initial period following resumption.
As of 09:00 UTC, Bitget recorded approximately 9,674 ETH in inflows compared with 9,023 ETH in outflows, resulting in positive net inflows of approximately 651 ETH.
The early data shows that users have continued to deposit ETH onto the platform alongside withdrawals.
While the data covers an early period following the resumption of ETH withdrawals, the balance between deposits and withdrawals provides an initial indication of how users are responding as services return.
The ETH resumption follows the reopening of BTC withdrawals across the Bitcoin and BSC networks on September 28.
The post Bitget begins phased withdrawal resumption after $388M security incident appeared first on Invezz
