Bitget Hack and Withdrawal Resumption 2026: Revised Loss Estimate and What Users Should Check

A summary of Bitget’s revised September 2026 security incident loss estimate, phased withdrawal resumption schedule, and the account details users should verify.

Key answer: Bitget announced that it detected unauthorized transfers from some hot and warm wallets at 18:31 UTC on September 24, 2026 (03:31 KST on September 25). The official estimated loss was revised from an initial $351.6 million to $387.5 million, and a phased withdrawal resumption schedule was announced by asset and network. Users should not assume withdrawals are available based on the schedule alone; they should check the current status of the relevant asset and network in their own accounts.

Last verified: September 30, 2026, 03:20 KST. The information below distinguishes Bitget's official announcements from independent reporting and does not guarantee real-time withdrawal availability or future investigation findings. This article does not include invitations to sign up or affiliate CTAs. Other CoinPop pages may contain affiliate links.

What happened: Sequence of announcements and revisions

Timing Confirmed announcement What to keep in mind
September 24, 18:31 UTC Bitget detected unauthorized transfers from some hot and warm wallets and temporarily suspended withdrawals This is the time the incident was detected, not the article publication time
September 24 Initial estimated loss of approximately $351.6 million announced An initial tally, not a final confirmed amount
September 25 Expanded on-chain tracking and revised the estimate to approximately $387.5 million The company's explanation was that this reflected classification of assets such as Zcash and TRON, not additional unauthorized transfers
September 26 Announced a vulnerability fix and a phased schedule for resuming withdrawals The fix and security claims are company statements and do not mean an independent external audit has been completed

Bitget says cold wallets were unaffected, user balances remain intact, and a protection fund worth more than $464 million will cover the losses from this incident. However, the exchange's claims and whether users can actually withdraw are separate matters that need to be checked. The stated value of the protection fund also varies with asset prices and composition; it should not be understood as insurance that guarantees coverage for every type of future loss. Loss estimates or wallet classifications mentioned in initial reports may also change as the investigation proceeds.

Bitget withdrawal resumption schedule: What time is it in Korea?

The following are the planned times converted from UTC to Korea Standard Time for the official Bitget phased withdrawal announcement. Even after these times, withdrawals may be delayed due to checks by account, asset, or network, or blockchain confirmations.

Asset/service Official UTC schedule Korea Standard Time (KST) Network
BTC September 28, 08:00 September 28, 17:00 Bitcoin
ETH September 29, 08:00 September 29, 17:00 Supported withdrawal networks: Ethereum · BSC · Arbitrum · Base · Optimism
USDT September 30, 08:00 September 30, 17:00 Supported withdrawal networks: Ethereum · BSC · Solana · Tron
Other coins, fiat currencies, and P2P October 2, 08:00 October 2, 17:00 Check by service

What does this mean for my assets?

  • For those with balances on Bitget: Check the displayed balance, the withdrawal button for the relevant asset, the order status, and the transaction hash separately. Being able to access the trading screen is not the same as withdrawals being processed normally.
  • For those planning to transfer to another exchange: First reconfirm the receiving exchange's supported deposit network, address, and tag, and, if possible, transfer a small test amount before moving the rest. You can also refer to the Bitget deposits, withdrawals, networks, and Travel Rule guide.
  • For those comparing exchange risks: Protection funds and proof of reserves are useful sources of information, but they do not prove real-time liquidity or rule out the possibility of future security incidents. The comparison of the limitations of exchange asset custody and proof of reserves explains the criteria separately.

If you receive a message using the incident as a pretext to promise “asset recovery” or “priority withdrawal processing,” do not click links or provide your seed phrase or 2FA code. Check announcements only through the official app or by manually entering the official website address. If the issue persists, provide your order number and status to official customer support. General information about Bitget accounts and security features is available in the Bitget comprehensive guide.

Facts, analysis, and remaining uncertainties

Confirmed official announcements: Detection of unauthorized transfers, revision of the estimated loss, claims that the vulnerability was fixed, and a phased withdrawal schedule. CoinPop analysis: This incident shows that being able to trade and being able to move assets may be different things. Therefore, actual withdrawal processing and the results of an independent post-incident investigation matter more to users' decisions than price outlooks. Unconfirmed: The final amount recovered, details of the compensation process, whether all networks have fully returned to normal, and the identity of the attacker must be confirmed through future official information.

Indicators to watch are: ① actual withdrawal processing announcements by asset and network, ② processing times for orders on hold, ③ investigation reports and the scope of verification by external security firms, and ④ post-incident disclosures about the protection fund and proof of reserves. The positive scenario is that withdrawals and disclosure of the investigation proceed on schedule; the neutral scenario is that delays remain on some networks. The risk scenario is that additional losses, withdrawal disruptions, or changes to the compensation process are confirmed. These distinctions are not price forecasts or trading signals.

Frequently asked questions

Was the loss from the Bitget hack $351.6 million or $387.5 million?

The first figure was the initial estimate on September 24; the second is Bitget's revised estimate, announced on September 25 after expanding its on-chain classification. Since it may change again as the investigation continues, check the announcement date and source as well.

Are USDT withdrawals available yet?

The official schedule starts at 08:00 UTC on September 30, or 17:00 KST. At the time of this article's final verification, this was still a future date and time. Check the relevant asset and network screen in your Bitget account to confirm actual availability.

Does the protection fund mean it is safe to keep assets on the exchange?

Bitget said the protection fund would cover the financial impact of this incident. However, this is the company's explanation for this specific event, not unconditional insurance against all losses or a guarantee of future security.

Sources and update criteria

Updated: September 30, 2026, 03:20 KST. Withdrawal availability and investigation findings may change. This article is for informational purposes only and is not investment or legal advice, nor a guarantee of asset safety.