Bitget has raised its confirmed loss estimate from the week's security breach to approximately $387.5 million, up from an initial $351.6 million. The exchange attributed the increase to additional assets identified during transaction tracing rather than further unauthorized transfers.
The company says its security team has identified the attack path and method used to bypass existing controls. Bitget stated that the underlying vulnerability has been remediated and no further unauthorized transfers are possible. Independent investigation teams from Mandiant and SlowMist are participating in the review.
The affected assets span multiple networks, including Ethereum and other EVM chains, XRP Ledger, Zcash, and TRON. Bitget has launched a recovery bounty program offering payments to eligible parties whose actions result in funds being frozen or recovered, calculated as a percentage of secured assets. The exchange noted that some funds have already been frozen through coordination with industry partners.
Bitget plans to restore withdrawal access in phases rather than all at once. Bitcoin withdrawals are scheduled to resume on September 28, followed by Ether withdrawals across supported networks on September 29. USDT withdrawals are planned for September 30, with other tokens, fiat services, and peer-to-peer withdrawals expected to return by October 2.
The exchange has maintained that customer account balances remain intact and that its protection arrangements cover the financial impact. Restoring withdrawal access represents a critical operational test of these assurances following the breach.
