Cryptocurrency exchange Bitget said in a Friday (Sept. 25) post on X that assets equivalent to about $387.5 million were stolen in an attack the company announced Thursday (Sept. 24).
In its earlier report, in a Thursday post on X, Bitget said it estimated that about $351.6 million in assets were stolen.
“The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate,” Bitget said in its Friday post. “It does not reflect further unauthorized transfers. The incident remains contained and no further unauthorized transfers are possible.”
Bitget said in its Thursday post that its security systems identified unauthorized transfers involving a limited number of hot wallets, its security team activated emergency response procedures and began a full investigation, and it suspended withdrawals while its teams complete a comprehensive security review.
We’d love to be your preferred source for news.
Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!
Bitget said it was working to restore withdrawal services.
“Most importantly, user funds remain protected,” Bitget said in its Thursday post. “The incident falls within the coverage of Bitget’s User Protection Fund, which currently holds more than $464 million. Customer account balances remain accurate, and deposits and trading continue to operate normally.”
In its Friday update, Bitget said it will announce a withdrawal plan Saturday (Sept. 26) at 4 a.m. UTC.
The company said that the investigation remains ongoing and that the figures it released may change as it classifies and traces more transactions.
“Withdrawals remain temporarily paused while additional security checks and remediation are underway,” Bitget said in the update. “Bitget will continue to provide verified updates on the investigation, asset recovery, withdrawal restoration and the User Protection Fund through its official channels.”
CNBC reported Friday that Bitget CEO Gracy Chen said during a livestream on X that the company suspects a North Korean hacking group may be behind the breach. Internet protocol addresses linked to VPN services previously used by the group were found to be involved in the latest attack, and the pattern of the attack resembled earlier ones attributed to North Korea, Chen said, per the report.
The Financial Times reported Friday that the Bitget incident is the largest crypto hack this year. Before this attack, $1.73 billion had been stolen across 333 incidents targeting crypto groups in 2026, the report said, citing data from TRM Labs.