Bitget Experiences $463 Million in Withdrawals Following Major Security Breach

Bitget, a prominent cryptocurrency exchange, reported $463 million in net outflows on September 29, marking the largest single-day withdrawal event in four years. This significant outflow followed a security breach that occurred on September 24, during which attackers exploited a vulnerability in a third-party security product, resulting in the unauthorized withdrawal of between $387.5 million and $388 million from the exchange's hot wallets.

The breach involved attackers conducting smaller test transactions to assess Bitget's risk controls before executing the main unauthorized withdrawal. While the exchange's private keys remained secure and cold storage wallets were unaffected, the incident has raised concerns about the integrity of third-party security products used by the exchange. Following the breach, Bitget initiated a phased resumption of withdrawals on September 28, four days after the incident.

Prior to the hack, Bitget maintained a User Protection Fund exceeding $464 million, which was designed to cover losses from such incidents. However, the fund has reportedly fallen below $200 million after absorbing a substantial portion of the losses incurred during the breach. CEO Gracy Chen indicated that initial forensic investigations suggest links to North Korean threat actors, specifically the Lazarus Group, with assistance from cybersecurity firms Mandiant and SlowMist in the ongoing investigation.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News