Go And Check It Yourself ๐
Bitget's latest update dropped and there's a lot in it. Here's the lot.
1๏ธโฃ The number went up
~$387.5M now, up from $351.6M. Zcash and TRON weren't in the first count.
Bitget's words: "It does not reflect further unauthorized transfers. The incident remains contained."
I'd rather see a figure revised upward with the reasoning than quietly left alone. Networks hit: Ethereum + EVM, XRP Ledger, Zcash, TRON.
2๏ธโฃ Withdrawals
The withdrawal plan lands by Sept 26, 4:00 AM UTC.
3๏ธโฃ Attacker addresses are public
๐ธ EVM: 0x770b10b273fc44fe9197d6bf20f145c2e98463ee
๐ธ XRP: rwNhefsz1UQEusxhCvHip3RANinWi4CTck
๐ธ ZEC: t1WgMdtND8NF7NDUuYmq8MpMj1NTCXkMDVG
๐ธ TRON: TBWNguTTgezw9dVorX441C6nDrZpRxYwKD
4๏ธโฃ The Recovery Bounty Program ๐ฐ
This is the bit I actually rate.
๐ธ 5% of any funds successfully FROZEN โ paid to whoever's voluntary effort caused the freeze
๐ธ 5% of any funds successfully RECOVERED โ same deal
10% all in. Bitget is running it through Bybit's
lazarusbounty.com as a core channel.
Worth knowing: court orders and law enforcement actions don't qualify, it's for voluntary contributions. And eligibility is decided by Bitget, no guarantees. But that's a serious incentive to go hunting.
5๏ธโฃ Anyone can watch the money move
Real-time fund tracing dashboard, open to the public. Not a summary. The actual tracker.
๐
trace.bgblockchain.xyz/v2#exโฆ
๐ Report info:
trace.bgblockchain.xyz/reporโฆ
๐ Attacker address API:
trace.bgblockchain.xyz/api/hโฆ
Exchanges, stablecoin issuers, bridges, researchers โ all working off the same picture. Mandiant and SlowMist are on the investigation.
Affected assets: XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX, TRX.
You don't have to take my word for any of it. Go and look yourself.
@bitget @GracyBitget #Bitget
๐๐ ๐ฃ๐ข๐ฅ๐ง๐๐ก๐ง ๐จ๐ฃ๐๐๐ง๐๐ฆ: The withdrawal plan will be announced by September 26th, 4:00 AM UTC. We appreciate your patience on this matter.
Based on the latest onchain tracing and classification of transactions, assets equivalent to approximately $387.5 million were transferred to attacker-controlled addresses across multiple networks.
The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate. It does not reflect further unauthorized transfers.
The incident remains contained and no further unauthorized transfers are possible.
The incident involved assets across Ethereum and several EVM networks, XRP Ledger, Zcash and TRON.
The primary attacker-controlled receiving addresses identified to date are:
โ EVM: 0x770b10b273fc44fe9197d6bf20f145c2e98463ee
โ XRP: rwNhefsz1UQEusxhCvHip3RANinWi4CTck
โ ZEC: t1WgMdtND8NF7NDUuYmq8MpMj1NTCXkMDVG
โ TRON: TBWNguTTgezw9dVorX441C6nDrZpRxYwKD
The confirmed affected assets include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX.
Our investigation and tracing efforts remain ongoing.
The figures above reflect information confirmed at the time of publication and may be updated as additional transactions are classified and traced.
The incident remains contained, with no further unauthorized transfers since the incident was contained, and the investigation with Mandiant and SlowMist remains ongoing
Withdrawals remain temporarily paused while additional security checks and remediation are underway.
Bitget will continue to provide verified updates on the investigation, asset recovery, withdrawal restoration and the User Protection Fund through its official channels.
๐๐ฐ๐ณ ๐ช๐ฏ๐ง๐ฐ๐ณ๐ฎ๐ข๐ต๐ช๐ฐ๐ฏ๐ข๐ญ ๐ฑ๐ถ๐ณ๐ฑ๐ฐ๐ด๐ฆ๐ด ๐ฐ๐ฏ๐ญ๐บ.