BITGET $350M HACK: POST MORTEM Between 18:31 and 21:23 UTC yesterday, Bitget was drained for $350M across 7 chains, with 5 wallets compromised. Arkham has labelled 26 hacker addresses so far. Here’s what happened after the attack:
37
83
591
88,231
Of the $350M, $228M left Bitget in 18 minutes, from 18:58 to 19:16 UTC. One Bitget cold wallet on XRP was drained for $153M. $66.2M of ETH, $34.8M of USDT, $12.9M of USDC and $12.8M of Tether Gold on Ethereum. $19.7M of USDT on Arbitrum, $15.4M of ETH on Optimism, $9.9M of BNB on BNB, $8.5M of AVAX on Avalanche and $4.2M of ETH on Base.
1
2
26
6,113
Within 10 minutes the stablecoins and gold were being sold for ETH. $25M of USDT went to Rizzolver in five $5M fills, the rest through Uniswap, 1inch and Furucombo. $38.9M of USDC was bridged to Ethereum and sold there.
3
24
5,550
From 19:44 UTC the ETH on Arbitrum, Optimism and Base was bridged to Ethereum through Across, Stargate and LayerZero, mostly in 400 to 500 ETH lots. By 20:04 UTC the cross-chain legs were done. Roughly $100M of non-ETH assets became about 36,600 ETH.

Sep 25, 2026 · 11:58 AM UTC

1
19
4,092
Then, the hackers split it into 10,000 ETH wallets. The first 10,000 ETH wallet was funded at 20:13 UTC. By 22:45 UTC there were six of them. With two smaller wallets of 4,596 and 3,698 ETH, 68,300 ETH ($183M) now sits across eight fresh addresses, none of which have sent anything out.
2
19
3,803
The BNB is still on the move. $6.9M of it has been split into 12 unlabelled BNB Chain wallets, the last transfer only 2 hours ago. At least $4.7M has been deposited to Thorchain, while $2M has been deposited to Fixedfloat.
3
21
6,669
Track the hacker on Arkham: arkm.com/explorer/entity/bit…

Bitget Hacker | Arkham

On-chain analysis of Bitget Hacker's cryptocurrency holdings by Arkham. Discover holdings, wallets, inflows, outflows and counterparties using our advanced blockchain analysis platform.

arkm.com
2
2
18
6,228
Sort replies: Relevant Recent Liked