Crypto exchange Bitget is resuming withdrawal services following a security breach that affected approximately $388 million in assets. Bitcoin withdrawals resumed on Monday, with additional assets scheduled to return over the coming days.
The September 24 incident compromised portions of Bitget's hot and warm wallet infrastructure, though the exchange confirmed that cold wallets remained secure. Bitget initially reported $351.6 million in stolen assets but later revised the figure to $387.5 million after accounting for additional transfers on Zcash and Tron networks.
Phased Withdrawal Restoration
Bitcoin withdrawals on the Bitcoin network and BNB Smart Chain were the first to resume. According to Bitget CEO Gracy Chen, Ether and Tether (USDT) withdrawals are scheduled to follow as security checks progress.
Under the announced schedule, ETH withdrawals are set to resume across Ethereum, BNB Smart Chain, Arbitrum, Base and Optimism. USDT withdrawals are scheduled for the following day across Ethereum, BNB Smart Chain, Solana and Tron. Other assets and peer-to-peer services are planned to return by Friday. The restoration applies uniformly to all users, with no priority access for institutional customers, VIP members, or company employees.
Attacker Activity and THORChain Response
The attacker has been moving stolen cryptocurrency through THORChain, a decentralized protocol for cross-chain asset swaps. Reports indicate the attacker is converting Ether to Bitcoin through the platform.
Bitget CEO Gracy Chen has called on THORChain to refuse services to addresses linked to the attack. THORChain responded that its network halt is a broad emergency security mechanism affecting all users rather than a selective freeze of specific funds. The protocol lacks a built-in address blacklist, which limits its ability to block specific addresses from conducting transactions.
