Bitget has confirmed it will restore withdrawals in phases from September 28 after a security incident that forced a temporary suspension, while raising the confirmed value of assets transferred to attacker-controlled addresses to approximately $387.5 million, up from an initial estimate of $351.6 million.
The exchange said the revised figure reflects additional assets identified during transaction tracing rather than a second wave of unauthorized transfers. Its security team has identified the attack path and remediated the underlying vulnerability. Bitget says no further unauthorized transfers are possible, and independent teams from Mandiant and SlowMist are participating in the investigation.
Withdrawals will resume according to a phased timetable. Bitcoin withdrawals are scheduled to return first at 08:00 UTC on September 28 through the Bitcoin network. Ether withdrawals will follow at 08:00 UTC on September 29 across Ethereum, BSC, Arbitrum, Base, and Optimism. USDT withdrawals will resume at 08:00 UTC on September 30 through Ethereum, BSC, Solana, and Tron. Remaining tokens, fiat withdrawals, and P2P services are planned to return by 08:00 UTC on October 2.
Bitget said the phased approach will apply consistently across users without preferential access. Trading and deposits continue during the withdrawal pause, and users do not need to take any action before services return. Customer account balances remain unaffected, and the company’s Protection Fund will cover the financial impact of the incident.
The revised loss estimate includes assets across multiple networks, including Ethereum and other EVM chains, the XRP Ledger, Zcash, and TRON. Bitget has also launched a recovery bounty program, and some funds have already been frozen through coordination with industry partners. CEO Gracy Chen will host a live AMA at 07:30 UTC on September 28, shortly before Bitcoin withdrawals are scheduled to resume.
