By Ulysses Cornelius
Checked September 24, 2026 at 6:36 p.m. ET.

Bitget said unauthorized transfers affected some of its online wallets on Thursday, leaving $351.6 million exposed. The crypto exchange temporarily paused withdrawals while deposits and trading stayed online. For traders, that creates two separate questions: what happened to prices, and whether funds can move when needed.

CEO Gracy Chen said user funds were safe and Bitget's protection fund held more than $464 million. Those remain company statements pending the incident report promised within 24 hours. Early on-chain estimates were lower, and one analyst's wallet classification conflicted with the company's description. That gap deserves attention.

TL;DR

  • Bitget said its systems detected unauthorized transfers at 18:31 UTC on September 24.
  • Chen put the amount exposed at $351.6 million and said the protection fund would cover customer losses.
  • Withdrawals were paused while deposits and trading remained available.
  • CoinDesk reported BGB down 2.9% at 22:10 UTC after a partial recovery. Bitcoin and ether were each down less than 0.3% over 24 hours.
  • The useful response is to separate token-price risk from exchange-access risk.

What happened

CoinDesk and Decrypt reported that Bitget confirmed a breach after researchers flagged unusual transfers from wallets labeled as belonging to the exchange. The company disclosed $351.6 million of exposure, a larger figure than the roughly $183 million initially tracked on-chain. The $351.6 million figure is a company-disclosed exposure, not a final independently reconciled loss.

Decrypt reported purchases and swaps over six minutes in which a newly created address spent $19.67 million of USDT0 to acquire 7,111 ETH on Arbitrum, paying as much as 5% above market price. Other observed assets included BNB, AVAX, USDC, USDT and XAUT. Fast conversions can reveal urgency, but they do not identify the attacker or settle the final loss.

There is also a wallet-label dispute. Chen said cold wallets remained secure and described the breach as contained to part of the hot and warm wallet layers. CoinDesk separately quoted an Arkham Intelligence analyst who classified three wallets as hot and one as cold. Until Bitget publishes wallet addresses and reconciles those labels, both claims should be treated as preliminary.

Why markets moved

BGB is the most direct confidence gauge because it is tied to the venue. CoinDesk reported that the token fell sharply after the news, recovered part of the move, and remained down 2.9% at 22:10 UTC. Bitcoin was down about 0.29% and ether about 0.2% over the preceding 24 hours.

That contrast suggests the first reaction was concentrated in venue-specific confidence rather than a broad crypto liquidation. It does not prove the wider market is insulated. If withdrawal restrictions last, reported losses rise, or more wallet layers are implicated, pressure could spread through forced position changes and customer migration.

Implications for most impacted cohorts

Bitget customers: A displayed balance is different from transferable funds. Check official withdrawal status by chain and asset. When service resumes, a small test transfer can verify access before a larger move.

BGB traders: A price rebound can reflect relief, but it cannot verify security controls. Pair the chart with timestamped operational updates and the promised incident report.

On-chain traders: Follow confirmed addresses and distinguish a transfer from a sale. Wallet labels can change as investigators reconcile ownership, custody layers and internal routing.

Centralized-exchange users: Run ChartDojo's six-checkpoint incident drill: identify the affected wallet layer, check deposits and withdrawals separately, record the latest official timestamp, compare company figures with on-chain estimates, reduce assumptions about immediate access, and rehearse the next action without placing a live order.

Potential positives vs negatives

Potential positives

  • Bitget said user funds were safe and its protection fund exceeded the disclosed exposure.
  • Deposits and trading stayed online while the security review continued.
  • A detailed report and orderly withdrawal restoration could narrow uncertainty quickly.

Potential negatives

  • The company figure was far above the first public on-chain estimate.
  • A withdrawal pause creates immediate access risk even if account balances are protected.
  • The disputed cold-wallet label could weaken confidence if Bitget does not reconcile it clearly.
  • False recovery links and impersonation attempts often appear around exchange incidents.

What could happen from here

Base case: Bitget publishes the report and restores withdrawals in stages. Confirmation would be successful small withdrawals across major chains, a reconciled wallet list, and no new unexplained outflows. Repeated delays or changing figures without an explanation would weaken that case.

Upside case: The protection fund covers losses, customers regain access smoothly, and BGB stabilizes as confidence returns. Transparent accounting and a specific remediation plan would support this scenario. Persistent access complaints would challenge it.

Downside case: The investigation identifies broader compromise or a longer outage. A higher verified loss, additional affected wallets, or continued withdrawal restrictions would support this scenario. Verified restoration and reconciled balances would weaken it.

What to watch next

  • Bitget's promised incident report and its final loss calculation.
  • The explanation for the wallet-classification conflict.
  • The exact time and chain coverage of withdrawal restoration.
  • New movements from addresses identified by reputable blockchain analysts.
  • Protection-fund disclosures and evidence that affected customers were made whole.

For related venue-risk practice, read ChartDojo's BitMart shutdown risk map and Coldcard wallet flaw explainer.

FAQ

Did Bitget lose $351.6 million?
Bitget's CEO said that amount was exposed. It should not be treated as a final independently verified loss until the incident report reconciles affected wallets and recovered assets.

Are Bitget withdrawals available?
At the time checked, the company said withdrawals were temporarily paused while deposits and trading remained online. Users should verify current status through official Bitget notices.

Does this change the outlook for bitcoin or ether?
The immediate move appeared more concentrated in BGB. A wider effect would depend on the duration of restrictions, the verified loss, and whether the incident spreads beyond the initially described wallet layers.

Sources

Build real skills, not bad habits. ChartDojo gives traders structured paper-trading practice and AI-powered feedback for decisions made under pressure. Start a free trial and rehearse your exchange-incident checklist before the next alert.

Educational market analysis, not financial advice.