Cryptocurrency exchange Bitget has started restoring withdrawals four days after attackers transferred approximately $387.5 million in digital assets from its wallet infrastructure.
Bitcoin withdrawals on the Bitcoin network resumed at 08:00 UTC on September 28. The exchange plans to restore Ethereum withdrawals on September 29, followed by USDT on several networks on September 30. Withdrawals involving other tokens, fiat, and peer-to-peer services are scheduled to return on October 2.
Bitget suspended withdrawals after detecting unauthorized transfers at 18:31 UTC on September 24. Deposits and trading continued operating during the security review.
The exchange initially estimated that approximately $351.6 million had been affected. Further on-chain analysis increased that figure to $387.5 million after investigators identified additional Zcash and TRON assets transferred during the original incident. Bitget stressed that the revised total does not represent additional theft after the attack was contained.
The stolen assets span multiple blockchains and include XRP, ETH, USDT, ZEC, USDC, USDT0, XAUt, BNB, AVAX and TRX.
According to Bitget CEO Gracy Chen, the attackers did not obtain the private keys protecting the exchange’s wallets. Instead, a critical backend system within the wallet infrastructure was compromised, allowing the attackers to spoof transaction information and trigger the authorization process used to move assets.
Bitget says the vulnerability responsible for the incident has now been identified and fixed. Its cold wallets were not compromised, and the separate self-custodial Bitget Wallet service was also unaffected.
Mandiant and SlowMist are assisting with the investigation, while law enforcement and other blockchain security organizations have also been notified. Bitget has launched a recovery bounty program offering rewards equal to 5% of qualifying funds successfully frozen or recovered.
The exchange says some stolen assets have already been frozen with help from industry partners. Tracking efforts continue as investigators follow funds across different blockchains and services.
Bitget maintains that customer balances remain unaffected and says its User Protection Fund will absorb the financial impact of the breach. The fund held more than $464 million when the incident was initially disclosed.
The company is restoring withdrawals gradually while additional security checks continue. Although the exploited vulnerability has been remediated, investigators are still tracing the stolen cryptocurrency, and the $387.5 million figure could be updated as more transactions are identified and classified.