Bitget detected approximately $351.6 million in unauthorized transfers from its hot wallets on September 24, 2026, at 18:31 UTC, according to a statement from CEO Gracy Chen. The exchange's security team activated emergency response protocols immediately upon detection.
"Bitget's security systems detected unauthorized transfers from some of our hot wallets," Chen wrote on X. "Our security team activated emergency response protocols immediately."
The Seychelles-based exchange operates a three-tier wallet architecture. Chen confirmed that cold wallets remain fully secure and that the breach was contained to portions of the hot wallet and warm wallet layers. User funds are protected, she stated.
Deposits and trading remain fully operational, though withdrawals have been temporarily paused pending completion of a security review.
Bitget is the sixth-largest cryptocurrency exchange by trading volume, processing over $1.1 billion daily according to CoinGecko data. Multiple cryptocurrencies, including stablecoins and Bitcoin, were moved from the hot wallet according to blockchain analysis firms Arkham Intelligence and Hacken.
The incident follows other major security breaches in the cryptocurrency sector this year, including a July firmware vulnerability in the Coldcard hardware wallet that resulted in approximately $120 million in losses, and unauthorized withdrawals of about 4,000 bitcoins from Blockstream's Liquid sidechain federation wallet earlier in September.
