24 September 2026 — What Happened to Bitget?
BITGET — Another Dark Night
On September 24, 2026, Bitget faced a major security incident.
So, what exactly happened?
At 18:31 UTC on September 24, Bitget's security systems detected unauthorized transfers from some of its hot wallets.
In Bangladesh time, that was around 12:31 AM on September 25.
According to Bitget's initial statement, approximately $351.6 million worth of assets were affected.
In simple terms, a large amount of cryptocurrency was transferred without authorization from some of Bitget's hot and warm wallet infrastructure.
However, Bitget stated that its cold wallets remained secure and that the majority of assets on the platform were not affected.
There was another important layer to this incident.
Bitget's User Protection Fund reportedly held more than $464 million, including around 5,500 BTC.
Bitget stated that the full amount of the loss from this incident would be covered by its Protection Fund.
Following the incident, Bitget temporarily suspended withdrawals as a precaution while its security team conducted a full review.
At that time:
Deposits remained operational.
Trading remained operational.
Withdrawals were temporarily suspended.
Bitget also activated its emergency response team, identified and flagged suspicious transfer addresses, and notified law enforcement and blockchain security firms.
But there was still one major question:
How did the attack actually happen?
At that stage, Bitget had not publicly confirmed the complete attack vector or root cause.
And until the investigation was complete, it was important not to blame any specific person, group, or attack method without evidence.
Bitget said it would publish a full incident report, including its root-cause analysis and corrective actions.
This incident once again highlights an important reality of the cryptocurrency industry:
No centralized exchange is completely free from security risk.
Even large and established platforms can face sophisticated security incidents.
That is why users should carefully consider an exchange's security architecture, transparency, protection mechanisms, and their own fund-management strategy before keeping large amounts of capital on any centralized platform for a long period of time.
Bitget stated that the Protection Fund would be used to cover the losses from this incident and that the fund would subsequently be replenished.
Now, the next major questions are:
What was the exact root cause?
What security changes will Bitget implement?
And when will withdrawals be fully restored?
The answers will depend on Bitget's final investigation and subsequent official updates.
This is the story of what happened to Bitget on September 24, 2026.
Source: Bitget Official Security Notice