Quick Answer
Bitget reportedly suffered a hack that led to the transfer of $351.6 million in cryptocurrencies from its hot wallets. The incident was detected at 18:31 UTC on September 24, 2026, with the platform immediately activating emergency protocols. Customer funds remain safe, according to CEO Gracy Chen's statement, thanks to the three-tier wallet architecture. Deposit and trading operations continue as normal, while withdrawals are temporarily suspended for a security review.
Bitget Suffers Reported $351.6 Million Hack
Bitget, the sixth-largest digital asset exchange by trading volume, reportedly suffered a cyberattack that led to the unauthorized transfer of $351.6 million in cryptocurrencies from its hot wallets. The incident was detected at 18:31 UTC on September 24, 2026, as communicated by CEO Gracy Chen on X.
Immediate Response and Emergency Protocols
Bitget's security immediately activated emergency protocols upon detecting the suspicious movements. Blockchain security firms had flagged the issue earlier in the same day. Chen reiterated the company's commitment to handling the situation with transparency, emphasizing that every dollar and every decision will be made public.
Three-Tier Architecture for Fund Security
Bitget operates with a three-tier architecture for wallets, including hot, warm, and cold wallets. The intrusion only affected part of the hot and warm wallets, while the cold wallets remained completely secure. This approach allowed protecting users' funds, as stated by the CEO.
Operations Temporarily Suspended for Security Review
Despite the incident, deposit and trading operations on Bitget remain fully operational. However, withdrawals have been temporarily suspended until a comprehensive security review is completed. This preventive measure aims to ensure that all funds are protected and that the system is safe again for users.
Analysis of Transferred Cryptocurrencies
Arkham Intelligence, a blockchain data firm, created a dashboard to monitor the unauthorized transfers. According to the data, various cryptocurrencies, including stablecoins, were moved from Bitget's hot wallets. Hacken, another crypto security firm, subsequently confirmed that Bitcoin was among the transferred cryptocurrencies.
Crypto Security Concerns on the Rise
The Bitget incident comes amid broader concerns about security in the cryptocurrency sector. Just last July, hackers exploited a bug in the firmware of the popular hardware wallet Coldcard to steal nearly $120 million in user funds. Additionally, this month, white-hat hackers withdrew about 4,000 Bitcoin, worth approximately $320 million at the time of transfer, from the federal wallet of Blockstream's Liquid sidechain.
Impact on Market and Reputation
Bitget, headquartered in Victoria, Seychelles, is the sixth-largest cryptocurrency exchange, with a daily trading volume exceeding $1.1 billion, according to CoinGecko data. The company's ability to navigate through multiple market cycles has been highlighted by the CEO, who emphasized the commitment to maintaining transparency and accountability during this critical phase.
Prevention and Protection Measures
Bitget's three-tier architecture serves as an example of how exchange platforms can implement security layers to protect users' funds. This structure is designed to contain any intrusions in hot and warm wallets, keeping cold wallets, which hold most of the funds, secure.
Crypto Security: An Evolving Sector
Recent events underscore the importance of crypto security and the need for advanced solutions to protect exchange platforms and users' funds. The crypto community continues to face significant challenges, with increasingly sophisticated attacks requiring equally advanced responses.
The Importance of NIS2 and DORA Compliance in the Crypto Sector
The Bitget incident raises critical questions regarding compliance with European regulations such as the NIS2 Directive and the DORA Regulation. Both regulations require structural adjustments by crypto platforms to ensure digital operational resilience and effective management of security incidents. The suspension of withdrawals represents a measure consistent with DORA's principles, which emphasize the need for rapid interruption mechanisms in case of security threats.
The Crucial Role of Cyber Insurance in the Crypto Sector
Events like Bitget's highlight the importance of a cyber risk policy for exchange platforms. Cyber insurance can help cover financial losses resulting from cyberattacks and provide resources for breach remediation. According to recent studies, the cost of cyber insurance premiums has increased by 30% in the last two years, reflecting the growth of threats and the need for advanced protection.
The Adoption of MDR Services for Crypto Security
In response to increasingly sophisticated attacks, many crypto platforms are adopting Managed Detection and Response (MDR) services. These services offer continuous and proactive incident response, utilizing a managed Security Operations Center (SOC) to monitor and respond to threats in real-time. The integration of an MDR service could have mitigated the impact of the attack on Bitget, providing more robust ransomware protection.
Impact on Crypto Wealth Management
For Bitget users and other crypto platforms, the incident underscores the importance of diversified crypto wealth management. Crypto tax advisors and accountants specializing in crypto taxation in Italy are advising investors to distribute their assets across different platforms to reduce the risk of exposure to single incidents. Additionally, compliance with crypto AML and KYC exchange regulations has become crucial to ensure the security of users' funds.
The Need for Institutional Crypto Custody
Bitget's three-tier architecture is an example of institutional crypto custody, which separates users' funds into hot, warm, and cold wallets. However, the incident highlights the need for further improvements in custody solutions. Platforms are exploring options such as multi-signature wallets and enterprise backup solutions to ensure effective business continuity even in the event of attacks.
The Integration of Advanced Technologies for Security
To address security challenges, crypto platforms are adopting advanced technologies such as Security Information and Event Management (SIEM) and Data Loss Prevention (DLP) systems. These technologies help monitor and protect sensitive data, providing additional protection against cyberattacks. Moreover, the adoption of zero-trust architectures and identity access management (IAM) solutions is becoming a common practice to improve overall security.
The Future of Crypto Security
The Bitget incident is a reminder of the ongoing need for improvements in crypto security. Platforms must adopt a proactive approach, investing in advanced technologies and following best practices for NIS2 and DORA compliance. Collaboration with blockchain security firms and the adoption of MDR services can help prevent future attacks and ensure the protection of users' funds.
Impact on MiCA Regulation
The European Union's Markets in Crypto-Assets (MiCA) regulation requires crypto platforms to implement robust security measures. The Bitget incident could accelerate the adoption of stricter regulations, with a focus on security audits and ISO 27001 certifications. Platforms that do not comply could face significant penalties, underscoring the importance of proactive security management.
The Importance of a Rapid Incident Response
Bitget's ability to immediately activate emergency protocols is an example of best practices in incident response. However, the incident highlights the need for continuous improvements in breach remediation mechanisms. Platforms must invest in advanced technologies and staff training to ensure a rapid and effective response to cyberattacks.
The Need for Advanced Ransomware Protection
Ransomware attacks pose a significant threat to crypto platforms. The adoption of ransomware protection and recovery solutions has become crucial to ensure the security of users' funds. Platforms must implement preventive measures and plan recovery strategies to minimize the impact of potential attacks.
Impact on User Trust
The Bitget incident could influence user trust in crypto exchange platforms. However, the transparency and accountability demonstrated by CEO Gracy Chen could help maintain user trust. Platforms must continue to communicate openly with users and implement advanced security measures to ensure fund protection.
The Role of Stablecoins in Crypto Security
The analysis of cryptocurrencies transferred during the attack highlights the importance of stablecoins in crypto security. Stablecoins represent a significant portion of the transferred funds, emphasizing the need for specific security measures for these assets. Platforms must implement advanced solutions for protecting sensitive data to ensure the security of stablecoins and other digital assets.
Towards a Safer Future
Editorial Note and Disclaimer
The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.
GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not perform real-time information activities.
The GoYou project does not provide professional, technical, legal, or financial advice and disclaims any liability for the misuse of the information published.
In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.