Centralized cryptocurrency exchange Bitget has confirmed a major security breach that resulted in the theft of approximately $351.6 million in digital assets. The breach marks the largest cryptocurrency exchange exploit of 2026, prompting immediate withdrawal suspensions, on-chain tracing efforts, and formal commitments from leadership that user funds remain fully protected.
Bitget Suspends Withdrawals Following Exploitation of Exchange Wallets
On-chain analysts from Bubblemaps and Arkham first flagged suspicious capital movements late Thursday after a newly created wallet address began draining substantial sums from wallets labeled as belonging to the Seychelles-based exchange. The attacker initially siphoned $19.67 million worth of cross-chain USDT0, rapidly converting the funds into 7,111 ETH within six minutes via decentralized liquidity protocols UniswapX and 1inch Fusion.
The attacker accepted execution premiums roughly 5% above prevailing market rates to expedite the asset swaps into non-custodial Ether. Subsequent transfers drained additional holdings across multiple networks, including Ether, Avalanche (AVAX), BNB, XRP, USD Coin (USDC), Tether (USDT), and Tether Gold (XAUT).
Outflows from Bitget’s public addresses ceased shortly after the initial transactions, reflecting the platform’s decision to freeze withdrawal processing while isolating remaining assets. In an update released Friday morning, Bitget CEO Gracy Chen confirmed that company investigators detected ties linking the breach to a North Korean state-sponsored hacking group, though formal technical attribution remains ongoing.
Protection Fund and Proof of Reserves Cover Full Extent of Losses
Despite the magnitude of the exploit, Bitget leadership assured platform users that customer account balances would not be impacted. While initial reports indicated that the exploit primarily hit hot operational wallets, executive disclosures clarified that the incident impacted both hot and cold wallet infrastructure.
“User funds are safe. The full amount of this loss falls within the coverage of Bitget’s User Protection Fund, which currently holds over $464 million,” Chen stated on X.
Bitget established its Protection Fund in 2022 to safeguard user assets against security breaches and systemic market shocks. Supported by a core holding of 5,500 BTC, the fund recorded an average valuation of $382 million during August 2026 as Bitcoin rallied toward $80,000, peaking at $441.5 million late in the month. Continued Bitcoin price gains lifted the reserve pool past $464 million by late September, providing sufficient liquidity to absorb the $351.6 million loss without threatening platform solvency.
Bitget noted that its Proof of Reserves (PoR) system maintains collateralization ratios above 100% across user holdings. The exchange confirmed that trading and deposit features remain operational, while withdrawal functionality will be restored sequentially following key rotation and infrastructure auditing.
Broader Market Dynamics and Macro Pressures
The $351.6 million security incident arrives during a period of heightened market volatility. Bitcoin traded sideways near $84,000 following news of the breach, balancing headwinds from elevated US Treasury yields against net weekly gains driven by favorable regulatory developments in Washington.
The attack represents the largest centralized platform exploit since February 2025, when exchange rival Bybit lost $1.4 billion to a cold wallet spoofing attack. As global regulators tighten oversight under frameworks like MiCA, the incident highlights the ongoing necessity for institutional-grade key management, real-time security monitoring, and verifiable, on-chain emergency reserves.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
