Bitget Hack Update 2026: Withdrawals Set to Resume in Phases After Major Security Breach

Bitget Hack Update 2026: Withdrawals Set to Resume in Phases After Major Security Breach

Nazmul hassan Shihab
Nazmul hassan Shihab
Share:

Bitget Hack Update 2026: Withdrawal Schedule Confirmed After $387.5M Security Breach

Last Updated: September 26, 2026

Bitget is preparing to reopen withdrawals following a major security incident detected on September 24, 2026.

According to the latest information provided by the exchange, approximately $387.5 million in assets were linked to unauthorized transfers during the incident. The initial estimate was around $351.6 million, but the figure was later revised after additional transactions were identified.

Bitget says the incident has been contained, the underlying vulnerability has been fixed, and customer account balances remain protected.

Bitget Withdrawal Reopening Schedule

Bitget is restoring withdrawals in phases rather than reopening every asset and network at the same time.

Current Schedule

Date Time (UTC) Service
September 28, 2026 08:00 UTC BTC Withdrawals
September 29, 2026 08:00 UTC ETH Withdrawals
September 30, 2026 08:00 UTC USDT Withdrawals
October 2, 2026 08:00 UTC Other Tokens, Fiat & P2P

For users in Bangladesh, 08:00 UTC is 2:00 PM Bangladesh time.

Bitget says users will be able to see withdrawal availability directly on the platform as each phase goes live.

Bangladesh Time Schedule

  • BTC: September 28 at 2:00 PM
  • ETH: September 29 at 2:00 PM
  • USDT: September 30 at 2:00 PM
  • Other Tokens / Fiat / P2P: October 2 at 2:00 PM

What Happened to Bitget?

Bitget detected unusual transfers from its exchange wallets on September 24, 2026 and temporarily suspended withdrawals while its security team investigated the activity.

According to the company, the attacker gained access to part of the wallet-related backend infrastructure and manipulated transaction instructions in a way that allowed unauthorized transfers to be approved.

Bitget has stated that its private keys were not compromised and that its cold wallets were not affected.

Security firms including Mandiant and SlowMist have been involved in investigating the incident and tracking the movement of affected assets.


Why Did the Estimated Loss Increase?

Bitget initially estimated the affected amount at approximately $351.6 million.

After further blockchain analysis, the estimate increased to approximately $387.5 million. The updated figure included additional transactions involving assets on the Zcash and Tron networks.

According to Bitget, the higher figure does not represent a second attack. Instead, it reflects a broader accounting of transactions connected to the original incident.

Reportedly affected assets included:

  • ETH
  • XRP
  • USDT
  • USDC
  • ZEC
  • TRX
  • BNB
  • AVAX
  • XAUt

Are Bitget Customer Funds Safe?

Bitget says customer balances remain intact despite the scale of the incident.

The exchange has also pointed to its Protection Fund, which it said was valued at more than $464 million around the time of the incident.

Bitget has stated that deposits and trading services continue to operate, while withdrawals were temporarily paused as a security precaution.

For users, the exchange's position is that the incident is being handled at the platform level rather than being deducted directly from customer account balances.

However, users should continue checking official Bitget announcements as individual withdrawal networks become available.


Why Is Bitget Reopening Withdrawals Slowly?

Bitget is using a phased reopening process rather than restoring all withdrawal services simultaneously.

After a major security incident, individual wallet systems and blockchain networks need to be checked before normal withdrawal operations resume.

According to the current schedule, Bitcoin is first, followed by Ethereum, USDT, and then other digital assets, fiat services and P2P.

This phased approach allows the exchange to verify wallet systems, security controls and transaction monitoring before restoring broader withdrawal access.


When Will USDT Withdrawals Resume?

USDT withdrawals are currently scheduled to resume on:

September 30, 2026 at 08:00 UTC

The listed supported networks include:

  • Ethereum
  • BNB Smart Chain
  • Solana
  • Tron

Because network availability may change during the recovery process, users should confirm that their selected network is active before making a withdrawal.

For larger transfers, users may also consider making a small test transaction first.


What About P2P and Fiat Services?

According to the current recovery schedule, P2P and fiat-related services are expected to return on October 2, 2026 at 08:00 UTC.

Other token withdrawals are also expected to be restored during this final phase.


Can Bitget Recover the Stolen Crypto?

Some recovery may be possible, although recovering the entire amount could be difficult.

Blockchain transactions are publicly traceable, allowing investigators to follow the movement of affected funds.

If stolen assets are transferred to centralized exchanges, those platforms may potentially freeze them after receiving valid requests from investigators or law enforcement.

Stablecoins such as USDT and USDC may also be subject to freezing by their issuers when specific addresses are linked to theft.

Bitget has also launched a recovery bounty program for individuals or organizations that help freeze or recover assets connected to the incident.

The company is working with blockchain security firms and industry partners to track attacker-controlled wallets.


What Should Bitget Users Do?

Users do not need to rush when withdrawals begin reopening.

Before transferring funds, users should:

  1. Check Bitget's official withdrawal status.
  2. Confirm that the correct blockchain network is available.
  3. Carefully verify the destination wallet address.
  4. Consider sending a small test withdrawal first.
  5. Wait for confirmation before transferring a larger amount.

Be Careful About Phishing

Following a major exchange security incident, scammers may create fake support messages, recovery websites or social media posts claiming to provide early withdrawal access.

Always access your Bitget account through the official Bitget website or app.


Bitget CEO AMA Scheduled for September 28

Bitget CEO Gracy Chen is expected to address the incident during a live AMA on September 28.

The discussion is expected to cover:

  • The security breach
  • Withdrawal restoration
  • Fund safety
  • Bitget's next steps

The event is scheduled shortly before Bitcoin withdrawals are expected to resume.


Bitget Hack Timeline

Date Event
September 24, 2026 Bitget detects unauthorized transfers and suspends withdrawals.
September 24–25 Initial estimate is approximately $351.6 million.
September 25 Further blockchain analysis raises the estimate to approximately $387.5 million.
September 25 Bitget says the vulnerability has been identified and fixed and announces a recovery bounty program.
September 26 Bitget publishes a phased withdrawal reopening schedule.
September 28 BTC withdrawals are scheduled to resume.
September 29 ETH withdrawals are scheduled to resume.
September 30 USDT withdrawals are scheduled to resume.
October 2 Other token withdrawals, fiat services and P2P are scheduled to return.

 


Is Bitget Safe After the Hack?

The incident highlights the risks associated with keeping digital assets on centralized exchanges.

When funds are held on an exchange, users depend not only on the security of their own accounts but also on the exchange's wallet infrastructure, access controls and operational security.

Bitget says the vulnerability involved in this incident has been identified and fixed and that no further unauthorized transfers are taking place.

Users who do not actively need funds on an exchange may consider using wallets where they maintain control of their assets, while understanding that self-custody also carries its own risks.


Frequently Asked Questions

Was Bitget hacked in 2026?

Yes. Bitget confirmed a security incident involving unauthorized transfers from parts of its exchange wallet infrastructure on September 24, 2026.

How much was affected in the Bitget hack?

The latest estimate in the provided update is approximately $387.5 million.

Were Bitget private keys stolen?

Bitget says its private keys were not compromised.

Did users lose their account balances?

Bitget says customer account balances remain protected and that the financial impact is being handled at the exchange level.

When will Bitget withdrawals reopen?

Withdrawals are scheduled to reopen in phases beginning September 28, 2026.

When will Bitcoin withdrawals resume?

BTC withdrawals are scheduled for September 28 at 08:00 UTC.

When will Ethereum withdrawals resume?

ETH withdrawals are scheduled for September 29 at 08:00 UTC.

When will USDT withdrawals resume?

USDT withdrawals are scheduled for September 30 at 08:00 UTC.

When will Bitget P2P reopen?

P2P services are currently scheduled to return on October 2, 2026.


Final Update

Bitget is now moving from incident response into recovery.

The most important development for users is the planned phased return of withdrawals, starting with Bitcoin on September 28 and continuing through early October.

The investigation into the incident and efforts to recover affected assets are still ongoing.

PaidRebate will continue to follow the story and update this page as new information becomes available.

Disclaimer: This article is for informational purposes only and should not be considered financial advice. Cryptocurrency trading, exchanges and digital asset custody involve risk. Always verify service availability and security information through official sources before moving funds.

Nazmul hassan Shihab
Nazmul hassan Shihab

A passionate writer and content creator.

Community Comments

Please log in to comment on this blog post.

Log In

No comments yet. Be the first to comment!

PaidRebate

Earn cashback on every trade with top brokers. Compare offers, track payouts, and grow faster.

Company Information

PaidRebate, established on 1 December 2021, is operated by Swiftlink Consultancy DWC-LLC, registered in Dubai South Free Zone, Dubai, UAE. Business Licence No. 13705 | Registration No. 12655. PaidRebate is an informational and promotional platform and does not provide regulated financial brokerage or investment advisory services.

Risk Disclosure

All information on this website is provided for educational and informational purposes only and should not be construed as investment advice, nor an offer or invitation to buy or sell any financial instrument. Trading forex, CFDs, and other leveraged products carries a high level of risk and may not be suitable for all investors — you can lose all or part of your capital. Past performance is not indicative of future results, and nothing on this site is a promise or guarantee of profit. This content is not intended for distribution to, or use by, any person or entity in any jurisdiction where such use would be contrary to local law or regulation. Read the full risk disclosure.

Signal & Expert Advisor Performance Disclosure

Signal results and expert-advisor performance shown on this website are historical and prepared with the benefit of hindsight. They do not involve financial risk and are not indicative of future results — win rates, pips, and returns frequently differ from actual live trading. Automated trading involves additional risks including slippage, latency, connectivity, and technical failures. Past performance is not a guarantee of future results.

Rebate Disclosure

Cashback rebates are commission-sharing payments from our broker partners and only offset trading costs — they are not deposits, investment returns, or a guarantee of trading profitability. Rebate rates and eligibility depend on the broker and account terms and may change at any time. PaidRebate may receive compensation when you open accounts or trade through links on this site. PaidRebate.com is the only official website — beware of fraudulent sites impersonating us.

© 2026 PaidRebate.com. All rights reserved.

SSL Secured
256-bit Encryption