Quick recap from today's livestream:
1. Withdrawals
BTC live on Bitcoin Mainnet & BSC — 9,585 orders, 4,098.036 BTC processed as of 17:00 UTC+8. ETH, USDT, others follow in phases starting tomorrow.
2. What happened
Full trace-back complete. The attacker exploited vulnerabilities from third-party products to steal internal credentials, then used those credentials to send fraudulent withdrawal commands that bypassed our risk controls. Private keys were not compromised, and cold wallets were not affected.
3. Security measures taken
-The incident has been contained. Affected systems were isolated and the vulnerability has been remediated.
-Relevant servers were isolated to prevent further compromise and preserve forensic evidence.
-Internal credentials were revoked and reissued, with access to highly sensitive systems restructured.
-We notified the relevant third-party vendor, shared details of the vulnerability and disabled the affected functionality pending a fix.
-Mandiant and SlowMist continue to support the independent forensic investigation and asset-tracing efforts.
4. Your funds
100% covered by the Bitget Protection Fund. No user impact. Fund will be topped back up to >$300M with our own capital within the week.
5. Bitget Project Stand Together
We’re launching Project Stand Together for our retail, VIP and professional users, including a trading-fee reward pool and additional benefits and protections for eligible VIP, PRO and market-maker participants. Details can be found in the links below:
Retail & VIP:
bitget.com/support/articles/…
PRO & institutional:
bitget.com/support/articles/…
This is our first security incident of this nature in eight years. We take it seriously, and our focus now is on recovery, stronger safeguards and transparency about what we learn. Thank you to our users and industry partners for standing with us.