Developing story. Last updated Thursday, September 24, 2026. Bitget has confirmed the hack. We will keep updating this post.
Was Bitget hacked? Yes. Bitget has confirmed a hack, with losses estimated at around $350 million. CEO Gracy Chen says user funds are safe. On September 24, 2026, an attacker drained Bitget hot and cold wallets across several chains in a matter of hours. The stolen stablecoins went straight into ETH, which no issuer can freeze. Users also report blocked withdrawals.
It ranks among the biggest exchange hacks since Bybit lost $1.4 billion in February 2025. Here’s what we know so far and what to do if you have funds on the exchange.
What Happened at Bitget on Thursday
The first warning came from Arbitrum. A brand-new wallet starting with 0xe410 spent 19.67 million USDT0 on ETH. It bought 7,111 ETH in six minutes. The USDT0 came straight from a Bitget hot wallet.
Soon after, trackers spotted a much bigger picture. Three hot wallets and one cold wallet sent assets to a single address. The flows covered ETH, USDT, USDC, AVAX, BNB and more, across several chains. Estimates climbed from $100 million to $170 million, then to around $183 million. Bitget later confirmed total losses of around $350 million.
Around the same time, users started posting about failed withdrawals. Bubblemaps, Wu Blockchain, The Block and Decrypt all flagged the activity within the hour.
One detail offers some comfort. After the first wave, the affected wallets still held around $530 million. The attacker did not empty them.
How the Attacker Moved the Money
The on-chain trail shows an attacker in a hurry. Three details stood out before Bitget said a word.
First, look at the price. The 0xe410 wallet bought ETH through UniswapX and 1inch Fusion. It paid up to 5% above the market price. The WETH/USDC pool on Arbitrum briefly printed $2,870. A treasury desk would never eat that much slippage on purpose.
Second, look at what got sold. Tether can freeze USDT at the contract level. ETH has no such off switch. Someone rushing to dump stablecoins for ETH is trying to beat a freeze.
Third, the receiving address carried no Bitget label. It also started splitting funds to six more wallets almost right away. That fan-out is a classic first laundering step.
Where the $350M Figure Comes From
The first wave hit EVM chains. Around $183 million in ETH, USDT, USDC, AVAX, BNB and other tokens left Bitget wallets for a single address. Etherscan now tags that address as “Bitget Exploiter 1.”
A second trail showed up on the XRP Ledger. Two Bitget-labeled wallets sent 93.7 million XRP, worth about $143 million, to a fresh address. The transfers landed in the same minutes as two of the ETH moves. Together, the two trails come close to the $350 million total.
One point matters for users. The hack hit the Bitget exchange’s own wallets. Nothing so far points to the separate Bitget Wallet self-custody app.
The Addresses Everyone Is Watching
These are the wallets on-chain trackers flagged. You can follow them on any explorer.
- Main destination: 0x770b10b273fC44Fe9197D6bF20F145c2e98463Ee
- Arbitrum ETH buyer: 0xe410a2E5710Ee787bcaa63f52A3943ff71F0d946
- 0x469Ac1406dE92f82C0563477240a3627057425DC
- 0xD2C2f029eFF5caCc686F24377CfdDcfc82d9F899
- 0x7c96279Ec1e888Aa56b9B836e0dB26ca48573E1C
- 0x94A43df7687A8494948Be937400e9d5D33135DA0
- 0xA6dD3F218B65E32Ccc37BE30f74884133c655545
Watch for two things now. A Tether freeze on any leftover stablecoins would help recovery. So would exchanges and bridges blocking the stolen ETH.
What Bitget Users Should Do Right Now
Don’t click random links. Scammers love hack days. Fake “Bitget refund” pages and phishing DMs usually appear within hours. Bitget will never ask for your password, 2FA codes or seed phrase.
Next, check Bitget’s official X account and announcement center only. Ignore screenshots of “statements” from random accounts.
Once withdrawals work, I would get my funds out. There is no upside in waiting. Send funds to your own wallet and double-check every address before you confirm.
Bitget says user funds are safe, and that’s good news. Still, a promise is not a withdrawal. Get your coins out first, and redeposit later if you want.
This is also a good moment to revisit where your long-term coins live. We weighed the trade-offs in our self custody vs exchange breakdown. If you decide to hold your own keys, our guide on how cold wallets secure your crypto covers the basics.
Looking for a Bitget Alternative? Six Head-to-Heads
Plenty of users are shopping for a new venue this week. Rather than guess, compare Bitget against the exchanges its traders actually move to. We have five head-to-heads ready, updated with the hack factored in:
- Bitget vs Hyperliquid: the self custody route, for traders who never want an exchange holding their coins again
- Bitget vs MEXC: near-zero fees and the biggest altcoin catalog, with MEXC’s own freeze risk explained
- Bitunix vs Bitget: 200x leverage and optional KYC from a younger exchange with no breaches
- OKX vs Bitget: MiCA licensing and the best Web3 wallet of any CEX
- Bybit vs Bitget: the exchange that already survived a bigger hack and paid everyone back
- Bitget vs Blofin: same futures fees, lighter KYC, and a clean security record
Each one links the full review of both exchanges, so you can go as deep as you need before moving funds.
Bitget’s Security Track Record
This is not Bitget’s first big loss. In April 2025, a small group of accounts exploited a flaw in its market-making bot on the VOXEL market. That incident cost about $100 million. Bitget said user spot and futures balances stayed intact.
The VOXEL loss came from a trading-logic bug, not stolen keys. This time the attacker got into the wallets themselves, which is a different kind of problem.
In February 2025, Bitget lent 40,000 ETH to Bybit after the $1.4 billion Bybit hack. Bybit repaid it within three days. Exchanges tend to back each other on days like this.
Bitget also runs a Protection Fund backed by 5,500 BTC. It averaged $351 million in July 2026, roughly the size of this loss. According to the CEO, user funds are safe, so Bitget appears ready to absorb the hit itself. That would use up most of the fund. How Bitget refills it, and how fast withdrawals return, are the open questions now.
For our earlier exchange reviews and comparisons, see our Bitget coverage.
Keep This Content Free
Hack days are a reminder that no single exchange should hold everything. Spreading funds across venues limits the damage when one of them has a bad day. Opening a second account? Use our OKX link or our Bybit link. You get the sign-up bonus, and we earn a small commission. That keeps AirdropAlert free.
Final Words
Bitget has confirmed what the on-chain data was already showing. Around $350 million is gone, and the attacker moved fast to swap it into ETH. The CEO says user funds are safe. The next few days will show how quickly withdrawals return and whether that promise holds.
We’ll update this post as Bitget shares more. Until then, avoid phishing links, withdraw what you can, and don’t treat any exchange as a savings account.
FAQ
Was Bitget hacked?
Yes. Bitget confirmed a hack on September 24, 2026, with losses of around $350 million. The attacker drained hot and cold wallets across several chains. CEO Gracy Chen says user funds are safe.
How much did the Bitget hacker steal?
Around $350 million. That includes roughly $183 million on EVM chains and about $143 million in XRP that left Bitget wallets in the same window.
Are Bitget withdrawals working?
Many users report failed or blocked withdrawals. Check Bitget’s official channels for the current status.
Is the Bitget Wallet app affected?
Nothing so far links the incident to the Bitget Wallet self-custody app. The hack hit the exchange’s own wallets.
Are Bitget user funds safe?
Bitget’s CEO says they are. The exchange has a Protection Fund worth around $351 million, which roughly matches the loss.
Should I withdraw my funds from Bitget?
Yes. I would withdraw as soon as withdrawals work. You can always deposit again once things settle. If Bitget stops processing withdrawals, your funds could be stuck for weeks or longer. A confirmed hack can trigger a bank run, and exchanges have frozen withdrawals under that kind of pressure before.
