Bitget Resumes Bitcoin Withdrawals After $387–388M Security Breach
Bitget has restored Bitcoin, Ether, and Tether withdrawals following a $387.5 million security incident caused by a third-party vulnerability. The exchange pledged to replenish its protection fund above $300 million, with peer-to-peer and remaining services set to reopen Friday.
Written by CoinArticle’s AI Newsroom · from 6 cited sources. How we work
Story Updates
- Updated Oct 2, 2026, 03:04 AM: Protection fund restoration confirmed separate from customer reserves; claims subject to Bitget assessment per CryptoSlate reporting.
- Updated Sep 30, 2026, 11:02 AM: Bitget has completed restoration of ETH and USDT withdrawals; P2P services to reopen Friday.
- Updated Sep 29, 2026, 09:02 PM: Crypto Briefing reports breach highlights third-party vulnerabilities across centralized exchange infrastructure.
- Updated Sep 28, 2026, 05:01 PM: Bitget revealed attackers exploited a third-party system vulnerability to steal internal credentials.
How Attackers Gained Access
Bitget revealed the breach vector as Bitcoin withdrawals restarted: attackers stole internal credentials through a flaw in a third-party system, according to CEO Gracy Chen. The exchange has not disclosed which third-party service was compromised or whether the vulnerability has been patched. The incident highlights supply-chain vulnerabilities in exchange infrastructure, where a single weak link in an external vendor can expose internal security controls.
Withdrawal Services Fully Restored
Bitget has completed restoration of Bitcoin, Ether, and Tether withdrawals after a phased reopening that began with BTC. Peer-to-peer and other remaining services are scheduled to reopen Friday, according to reporting from Crypto.news. The full restoration allows the exchange to restore trading liquidity across its major asset pairs after the supply chain attack temporarily disrupted operations.
Protection Fund Restored, Claims Subject to Assessment
CEO Gracy Chen committed to restoring Bitget's protection fund above $300 million this week, a measure intended to cover future user losses. According to CryptoSlate, the restored backstop is separate from customer reserves, and claims remain subject to Bitget's assessment. The exchange has not disclosed whether the stolen funds were recovered or the total extent of customer impact beyond the headline breach figure. A $300 million protection fund covers approximately 77% of the stated $387.5 million loss.
Why It Matters
For Traders
Full withdrawal access restores liquidity for Bitget users; trading friction from asset-specific lockdowns eliminated across major pairs.
For Investors
Third-party attack vector signals systemic supply-chain risk; protection fund covers only 77% of loss, leaving partial coverage gap.
For Builders
Third-party integrations at centralized platforms present cascading security risks; dependency audits and graduated exposure strategies warrant review.
This article is for information only and is not financial advice. Read the full disclaimer.
