Over the past 24 hours, Bitget recorded $231M in deposits, approaching August’s daily average of $245M. On September 29, futures trading volume reached $9.2B, with open interest at $4.4B. Market share held steady, reflecting resilient trading activity. To everyone who stayed with us, thank you for your trust. We’re encouraged to see deposit activity returning towards normal levels as we move forward together.

We are very grateful for SlowMist's quick response and professionalism in helping us investigate this incident thoroughly. They have shared their findings on the September 24 security incident. Their investigation identified malicious activity involving third-party security products, including a zero-day vulnerability, and recovered a customized tool used by the attacker to initiate unauthorized withdrawals. The findings align with the attack path we previously shared and add further detail on how the incident unfolded. Our focus is firmly on what comes next: applying these findings, continuing to strengthen our security controls and continuing to protect our users and their assets.

🚨 EXCLUSIVE INTERVIEW WITH BITGET CEO GRACY CHEN I sat down with @GracyBitget to discuss the recent Bitget security incident and the biggest questions from the crypto community. We talked about: • What happened on September 24 • User funds & asset safety • Bitget’s wallet infrastructure • The Protection Fund • Withdrawal restrictions • Security improvements • What happens next This is a direct conversation with @bitget CEO to understand what happened and what users should know. 🎥 Watch the full interview below.

We sincerely thank our global community for your patience, understanding, and continued support. To show our appreciation, Bitget is launching limited-time high-yield opportunities for stablecoins, with up to 12% APR. We're also introducing a special BTC and ETH PoolX campaign. Eligible users can lock BTC to share in a 100,000 BGB reward pool or lock ETH to share in a 500,000 USDT airdrop.

Following the ETH withdrawals resumption on September 29, Bitget ETH inflows amounted to approximately 9,674, with outflows at approximately 9,023 ETH, as of 09:00 (UTC). This follows the resumption of BTC withdrawals across the Bitcoin and BSC networks on September 28.

In recognition of our community's continued trust and support, we're launching the Bitget Alliance Program to enhance the trading and asset experience on the platform. During the promotion period, Bitget will establish an exclusive user reward pool equivalent to 30% of the platform’s transaction fee revenue. Rewards will be distributed to eligible users based on their valid trading contributions and valid asset value. In addition, eligible VIP users will receive 30 days of VIP level protection, ensuring continued access to their existing VIP benefits while offering more tailored support across different user groups.

Bitget has begun the phased resumption of withdrawals following the security incident identified on September 24, with BTC withdrawals on the Bitcoin network started at 08:00 UTC on September 28 as scheduled. The resumption follows additional security work across Bitget's withdrawal infrastructure. The vulnerability has been remediated and the incident remains contained, with no further unauthorized transfers identified following containment. User account balances remain unaffected.

Bitget will begin resuming withdrawals in orderly phases following the security incident identified on September 24. The vulnerability involved in the incident has been identified and remediated. Bitget's security and technical teams have since been conducting additional validation and security checks across the withdrawal infrastructure, while independent cybersecurity experts Mandiant and SlowMist continue to support the investigation. The temporary withdrawal pause remains a security measure and is not related to the availability of user assets. User account balances remain unaffected, and Bitget's Protection Fund covers the financial impact of this platform-wide incident. Withdrawals will resume in an orderly manner once these security checks are completed. The current withdrawal resumption schedule is as follows: > Sep 28, 8:00 (UTC): BTC (Bitcoin Network) > Sep 29, 8:00 (UTC): ETH (Ethereum, BSC, Arbitrum, Base, Optimism) > Sep 30, 8:00 (UTC): USDT (Ethereum, BSC, Solana, Tron) > Oct 2, 8:00 (UTC): Other Tokens / Fiat / P2P Our objective is to restore withdrawal services across all supported assets and networks as quickly and safely as possible. The incident remains contained, and no further unauthorized transfers are possible. User funds are unaffected throughout this process. Trading and deposits continue to operate. Users do not need to take any action ahead of the rollout. Withdrawal availability will be reflected directly on the Bitget platform, and users are advised to follow Bitget's official channels for updates.

𝗜𝗠𝗣𝗢𝗥𝗧𝗔𝗡𝗧 𝗨𝗣𝗗𝗔𝗧𝗘𝗦: The withdrawal plan will be announced by September 26th, 4:00 AM UTC. We appreciate your patience on this matter. Based on the latest onchain tracing and classification of transactions, assets equivalent to approximately $387.5 million were transferred to attacker-controlled addresses across multiple networks. The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate. It does not reflect further unauthorized transfers. The incident remains contained and no further unauthorized transfers are possible. The incident involved assets across Ethereum and several EVM networks, XRP Ledger, Zcash and TRON. The primary attacker-controlled receiving addresses identified to date are: → EVM: 0x770b10b273fc44fe9197d6bf20f145c2e98463ee → XRP: rwNhefsz1UQEusxhCvHip3RANinWi4CTck → ZEC: t1WgMdtND8NF7NDUuYmq8MpMj1NTCXkMDVG → TRON: TBWNguTTgezw9dVorX441C6nDrZpRxYwKD The confirmed affected assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX. Our investigation and tracing efforts remain ongoing. The figures above reflect information confirmed at the time of publication and may be updated as additional transactions are classified and traced. The incident remains contained, with no further unauthorized transfers since the incident was contained, and the investigation with Mandiant and SlowMist remains ongoing Withdrawals remain temporarily paused while additional security checks and remediation are underway. Bitget will continue to provide verified updates on the investigation, asset recovery, withdrawal restoration and the User Protection Fund through its official channels. 𝘍𝘰𝘳 𝘪𝘯𝘧𝘰𝘳𝘮𝘢𝘵𝘪𝘰𝘯𝘢𝘭 𝘱𝘶𝘳𝘱𝘰𝘴𝘦𝘴 𝘰𝘯𝘭𝘺.

About the Bitget Protection Fund 🛡️ The Bitget Protection Fund exists for moments like this. It holds 5,500 BTC, approximately $464M at current prices. All fund wallet addresses are public and can be verified on-chain by anyone, at any time. The fund is designated to protect user assets against platform-wide threats such as cybersecurity incidents. Losses from this hot wallet incident after assessment will be borne by the Protection Fund. We will replenish the fund. Details and coverage terms will be announced separately.

[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026 At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately. What we have confirmed: -Estimated funds affected: approximately $351.6 million -Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers. -User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million Actions we have taken: -Emergency response team activated within minutes of detection -Abnormal transfer addresses identified, flagged, and reported -Withdrawals temporarily suspended as a precautionary measure, pending security review -Law enforcement and on-chain security firms have been formally notified and are engaged What this means for you: -Your account balances are accurate and your assets are protected -Deposits and trading remain fully operational Withdrawals are temporarily paused and will be restored as soon as the security review is complete -What comes next: We will provide updates on an hourly basis across this channel and all official platforms. A full incident report — including root cause analysis and corrective actions — will be published within 24 hours. We will not speculate on the attack vector until the investigation is complete. Bitget has navigated multiple market cycles. We will not run from this. Every dollar and every decision will be accounted for, transparently and in full. Updates will be posted here and across all official Bitget channels as they become available. — Gracy Chen, CEO, Bitget