Former TV host turned #BTC #BGB hodler | World traveler ✈️ | CEO at @bitget 🫡 | Writing daily #crypto insights with tips on personal growth ✍️ | NFA & DYOR
Bitget
- Tweets 4,979
- Following 1,615
- Followers 292,939
- Likes 1,521
Pinned Tweet
As Bitget continues to expand globally, we will remain committed to meeting local regulatory requirements and building a trusted platform for our users.
As part of our commitment to regulatory transparency, Bitget clarifies that it is not licensed, approved, registered, authorized or regulated by the Monetary Authority of Singapore (MAS).
bitget.com/blog/articles/not…
61
19
248
169,574
@bitget @GracyBitget — you previously said the hacker did not take funds from the cold wallets. However, the on-chain data appears to show withdrawals from cold wallet addresses as well.
Can you clarify this discrepancy and what happened to the funds moved from the cold wallet
2
3
8
496
Within 24 hours of the September 24 (UTC) incident: here is our further update as promised. Our investigation with Mandiant and SlowMist is ongoing — thorough forensic analysis takes more than 24 hours, and further findings will be shared as they become available. Three key updates below 👇
Revised figure:
Onchain tracing has confirmed $387.5M transferred to attacker addresses — revised up from $351.6M. The higher figure reflects a more complete accounting of transfers during the incident, adding Zcash and TRON assets. To be clear: this is not additional theft. No further unauthorized transfers have occurred. The incident remains contained. Mandiant and SlowMist investigations are ongoing.
Launched bounty program:
Recovery Bounty Program is now live. 5% for voluntary freezing attacker funds, 5% for voluntary recovery. Freezes already secured count toward the bounty — thank you to every exchange, foundation and security team that moved quickly. We have published a real-time tracing dashboard, a submission portal, and the attacker's address API. You can also submit reports through Bybit's Lazarusbounty platform. Exchanges, security researchers, onchain investigators — we need you.
Resuming withdrawals:
We are currently working full steam ahead to prepare to resume withdrawals. The withdrawal plan will be announced by September 26th, 4:00AM UTC.
To read more: bitget.com/support/articles/…
124
54
431
71,010
希望 Bitget 受损用户都可以得到妥善处理
目前看平台保证金足以赔付，对付黑客应该是全行业的共识，别在这个时候落井下石吧，不善。
乐观一点， Grace 在直播受损处理的时候竟然有人问她是不是单身，她说是单身，但关你屁事哈哈哈哈哈哈哈哈哈哈哈哈。
29
6
118
38,792
Hi @GracyBitget I deposited my funds to bitget but it is still not shown on the app, i have created a ticket with support but no reply yet. Please have a look on this matter 🙏🙏
2
1
800
Please stay vigilant and verify all Bitget-related accounts, messages, and links before engaging.
Beware of impersonators and suspicious links claiming to be official.
You can verify official Bitget channels here. bitget.com/promotion/officia…
Simply select the platform (X, Telegram, website, etc.) and paste the URL to confirm whether it is official.
106
39
282
92,137
[UPDATES] We are currently working with independent third-party experts Mandiant and SlowMist for a full investigation.
Our first priority is our users. User balances remain intact, and Bitget's User Protection Fund covers the impact on this platform-wide incident.
Bitget Wallet operates as a self-custodial wallet on a completely separate and independent infrastructure from Bitget Exchange and was not affected by this incident.
Bitget Wallet users' assets remain onchain under users' control and remain unaffected.
The Bitget Exchange platform continues to operate normally.
Withdrawals are still temporarily paused while we complete additional security checks, and we will restore them as soon as we are confident that it is safe to do so.
We know that during an incident like this, users want answers quickly. We will provide timely updates through Bitget's official channels.
36
31
190
160,010
最新的进展同步一下：我们正在与独立第三方专家 @Mandiant 和 @SlowMist_Team 合作，对此次事件进行全面调查。
其他几点都是说过的，我再强调一下：
-我们的首要任务是保障用户。用户余额保持完整，Bitget 用户保护基金将覆盖此次平台层面事件造成的影响。
-Bitget Wallet 为自托管钱包，运行于与 Bitget Exchange 完全分离且独立的基础设施之上，未受此次事件影响。
-Bitget Exchange 平台的充值交易奖励等功能都继续正常运行。在我们完成额外安全核查期间，提币功能暂时暂停；待我们确认可以安全恢复后，将尽快恢复提币。
-我们明白在此类事件发生时，用户希望尽快获得答复。我们将通过Bitget官方渠道及时发布最新进展。请关注我的和@bitget @xiejiayinBitget 的 X账号以及Bitget官方公告。
[UPDATES] We are currently working with independent third-party experts Mandiant and SlowMist for a full investigation.
Our first priority is our users. User balances remain intact, and Bitget's User Protection Fund covers the impact on this platform-wide incident.
Bitget Wallet operates as a self-custodial wallet on a completely separate and independent infrastructure from Bitget Exchange and was not affected by this incident.
Bitget Wallet users' assets remain onchain under users' control and remain unaffected.
The Bitget Exchange platform continues to operate normally.
Withdrawals are still temporarily paused while we complete additional security checks, and we will restore them as soon as we are confident that it is safe to do so.
We know that during an incident like this, users want answers quickly. We will provide timely updates through Bitget's official channels.
216
51
480
143,288
刚才上午跟大家做了个三个多小时的直播，这里总结一下直播中聊到的点：
① Bitget 安全事件12小时进展通报。以下为具体信息，不打官腔。
② 受影响资产包括ETH、XRP（单链损失最大）、BNB、AVAX、USDT、USDC及其他代币。涉及链包括：以太坊、XRP账本、Arbitrum、Avalanche、Optimism、BSC、Base。所有链上冷钱包已确认安全，未受波及。
③ 我们已联系所有受影响链的基金会，其中有基金会已确认冻结黑客钱包地址。我们正在全力跟进所有可行渠道，并将持续公布最新进展。
④ 根据IP行为特征及链上分析，此次攻击手法与朝鲜黑客组织的已知模式高度一致。我们已上报相关机构，并全面配合开展全球调查。
⑤ Bitget Wallet（去中心化钱包）与Bitget交易所基础设施完全独立运行，本次事件对其无任何影响。Bitget Wallet资产完全安全。
⑥ 关于平台财务状况的透明说明：除逾4.64亿美元保护基金（均存放于可公开核查的钱包地址）外，Bitget自有资产超过10亿美元。用户资金以1:1比例覆盖，保护基金和用户资产数据均可链上核实。
⑦ 关于提币恢复时间：我们的目标是尽快完成全面恢复。确认具体时间窗口后将第一时间公告。我们不会承诺无法兑现的时间节点。
Live about Bitget Hot Wallet Incident on September 24, 2026 nitter.net/i/broadcasts/1pKdRDYoj…
167
58
520
200,712
Earlier 7 hours ago, I hosted a live stream with everyone that lasted over three hours. Here's a summary of the points I covered in the live:
① Bitget security incident update — 1 hours in. We're sharing specific facts, not just reassurances.
② Affected assets include ETH, XRP (the largest single chain loss), BNB, AVAX, USDT, USDC, and several other altcoin. The incident spans multiple chains: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. Cold wallets across all chains have been confirmed secure and unaffected.
③ We have contacted foundations across all affected chains. A few have already frozen the hacker's wallet addresses. We are actively pursuing every available avenue and will provide updates as the situation develops.
④ Based on IP behavioral patterns and on-chain signatures, this attack is consistent with techniques used by DPRK-linked hacker groups. We have notified relevant authorities and are cooperating fully with them globally.
⑤ Bitget Wallet operates on completely separate infrastructure from Bitget Exchange. It was not affected by this incident. Bitget Wallet's funds are fully safe.
⑥ To be transparent about our financial position: beyond the $464M+ Protection Fund — all held in publicly verifiable wallets — Bitget holds over $1 billion in its own assets. User funds are covered on a 1:1 basis.
⑦ Withdrawal restoration timeline: we are targeting a full resumption as soon as possible. We will announce the exact window as soon as it is confirmed. We will not commit to a timeline we cannot deliver.
Live about Bitget Hot Wallet Incident on September 24, 2026 nitter.net/i/broadcasts/1pKdRDYoj…
91
54
301
78,640
Another day another hack in crypto.
At 18:31 UTC on September 24, 2026, Bitget’s security systems identified unauthorized transfers involving a limited number of hot wallets.
Our security team immediately activated emergency response procedures and began a full investigation.
Based on our current assessment, approximately $351.6 million in assets were affected. Bitget’s cold wallets and the overwhelming majority of platform assets remain secure and unaffected.
Most importantly, user funds remain protected.
The incident falls within the coverage of Bitget’s User Protection Fund, which currently holds more than $464 million.
Customer account balances remain accurate, and deposits and trading continue to operate normally.
As a precaution, withdrawals have been temporarily suspended while our teams complete a comprehensive security review.
We have identified and flagged the relevant transfer addresses and have formally engaged law enforcement agencies and leading on-chain security partners.
We are working around the clock to restore withdrawal services as soon as it is safe to do so.
Bitget will provide further updates through our official channels.
We will not speculate on the attack vector while the investigation remains ongoing. Our focus is on protecting users, securing all systems, and delivering complete transparency throughout this process.
42
8
102
23,414
来自 @SpecterAnalyst 的链上分析关联出朝鲜黑客历史上的有关资金。另外，这次手法上确实和之前朝鲜黑客相关组织的手法类似，包括资金归集习惯…
更多信息见 Bitget 官方披露就好，我们在协同调查中。
Regarding who is behind the hack:
I present to you THE LAZARUS GROUP.
just linked this hack to the AFX hack, which stole $24M in July and was specifically attributed to TraderTraitor.
The stolen XRP from Bitget was bridged and can be directly linked to the funds stolen in the AFX hack.
Stay smart.
11
14
85
43,718
Bybit team is standby to help in any ways that we can. Bitget helped us when we had the hack.
we are updating lazarusbounty.com/en/ to help Bitget to capture and trace the stolen fund movement.
Here is what we can confirm at this stage:
On the attack:
Our security team has made initial progress in tracing the source. The attacker compromised a critical backend system within our wallet infrastructure, used it to spoof transaction data, and triggered our authorization process to move funds out. Private key compromise has been ruled out — this excludes the more severe risk scenarios. Loss containment is confirmed. No further unauthorized transfers are possible. The specific method of system intrusion remains under active investigation. A full technical report will follow once confirmed.
On withdrawal restoration:
Multiple technical teams are working in parallel on system remediation and security hardening. Withdrawal restoration is being prepared in parallel. We will announce a timeline as soon as one is confirmed — we will not commit to a window we cannot guarantee.
321
273
3,646
635,322
感谢这位网友的总结
刚听了一会 @GracyBitget 的直播回应，总结几点：
1/ 被盗资金稳在 3.516 亿美元这个数。没有继续增加。
2/ 19 盗黑客转账都是热钱包 + 温钱包，没有冷钱包。
3/ 目前还没有找到最根源的问题 (被盗原因) 是什么。现在能确定的是：1) 黑客没有伪造用户信息进行提币。2) 黑客没有拿到钱包私钥。3) 黑客入侵了 Bitget 公司的系统，进行了提币。
—— 这也是要暂停提币的原因，担心在问题排查清楚之前恢复提币，会带来更大的损失。
4/ 恢复提币时间：快则几小时，慢则几天。现在无法确定。但「应该不需要几周」。
5/ 跟上次 Bybit 被盗的根源和性质不一样。这次涉及到的链、币种都更多。最大的被盗单一币种是 XRP，有一个多亿。还有很多 USDT, USDT0, USDC, XAU 等被换成累计 1.7 亿美元的 ETH。「Ethereum: 黑客赖以生存的公链」核心定位不变nitter.net/Sea_Bitcoin/status/194…
65
10
178
80,355
Here is what we can confirm at this stage:
On the attack:
Our security team has made initial progress in tracing the source. The attacker compromised a critical backend system within our wallet infrastructure, used it to spoof transaction data, and triggered our authorization process to move funds out. Private key compromise has been ruled out — this excludes the more severe risk scenarios. Loss containment is confirmed. No further unauthorized transfers are possible. The specific method of system intrusion remains under active investigation. A full technical report will follow once confirmed.
On withdrawal restoration:
Multiple technical teams are working in parallel on system remediation and security hardening. Withdrawal restoration is being prepared in parallel. We will announce a timeline as soon as one is confirmed — we will not commit to a window we cannot guarantee.
[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026
At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately.
What we have confirmed:
-Estimated funds affected: approximately $351.6 million
-Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers.
-User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million
Actions we have taken:
-Emergency response team activated within minutes of detection
-Abnormal transfer addresses identified, flagged, and reported
-Withdrawals temporarily suspended as a precautionary measure, pending security review
-Law enforcement and on-chain security firms have been formally notified and are engaged
What this means for you:
-Your account balances are accurate and your assets are protected
-Deposits and trading remain fully operational
Withdrawals are temporarily paused and will be restored as soon as the security review is complete
-What comes next: We will provide updates on an hourly basis across this channel and all official platforms. A full incident report — including root cause analysis and corrective actions — will be published within 24 hours. We will not speculate on the attack vector until the investigation is complete.
Bitget has navigated multiple market cycles. We will not run from this. Every dollar and every decision will be accounted for, transparently and in full.
Updates will be posted here and across all official Bitget channels as they become available.
— Gracy Chen, CEO, Bitget
173
109
755
639,025
关于攻击原因：
安全团队已初步定位攻击来源。黑客入侵了钱包服务的一个关键后台系统，并利用该系统伪造转账信息、调用授权签名流程，将资金转出。可以排除私钥泄漏的情况——这意味着更恶劣的风险场景已被排除。目前确认止损已完成，平台不存在进一步资金流失的风险。黑客具体入侵手法仍在技术核查中，完整报告将在调查结束后发布。
关于提币恢复：
多组技术团队正在并行推进系统修复与安全加固，提币恢复准备工作同步进行。我们将在有明确时间窗口后第一时间公告，不提前承诺无法兑现的时间。
确认
1.初步评估涉及金额约3.516亿美金
2.平台有三层钱包体系，确认当前全部冷钱包未受影响
3.用户资金安全。本次损失金额完全在Bitget用户保护基金覆盖范围之内，保护基金当前规模逾4.64亿美元
已采取的措施：
1.事件发生后数分钟内启动应急响应小组
2.异常转账地址已标记并上报
3.出于资金安全考虑，提币功能暂时关闭，待安全核查完成后有序恢复
4.已通知执法机构及链上安全机构介入调查
我将以小时级别持续同步事件最新进展，请关注本渠道及官方各平台。正在准备会开启一个直播，直面大家有的任何问题。
104
45
405
349,804