Crypto exchange Bitget released an updated incident report clarifying that approximately $388 million in assets were affected by a security breach, revising a previous estimate of $352 million.
In a Friday update, Bitget announced it would continue to pause withdrawals following the breach and launched a bounty program to incentivize freezing or recovering the assets. Based on onchain tracing, the exchange confirmed that $387.5 million was transferred to attacker-controlled addresses, which is about $35 million higher than the figure reported on Thursday.
The exchange explained that the revised figure reflects a more complete accounting of transfers during the incident, including affected assets on Zcash and TRON that were left out of the initial estimate. Bitget emphasized that the update does not reflect additional unauthorized transfers, adding that the incident remains contained and no further unauthorized movements are possible.
The security breach involved addresses on Ethereum Virtual Machine networks, the XRP Ledger, Zcash, and TRON. Stolen assets included XRP, Ether, Tether's USDT, Zcash, USDC, USDT0, XAUt, BNB, AVAX, and TRX. The follow-up report did not mention comments made by CEO Gracy Chen on Thursday regarding speculation that a North Korean hacking group might have orchestrated the attack.
Even with the updated total of assets transferred to hacker-controlled addresses, the Bitget breach stands as one of the largest security incidents in the industry, following a February 2025 hack in which about $1.5 billion worth of Ether was stolen from Bybit.
