Bitget revises security incident figures: $388M in crypto affected
The security incident at Bitget, currently estimated to have impacted approximately $388 million worth of cryptocurrency, ranks among the most significant breaches affecting the crypto sector since the Bybit incident in 2025.
On Friday, cryptocurrency exchange Bitget published an amended incident assessment regarding Thursday's security compromise, revealing that approximately $388 million in digital assets were impacted rather than the initially disclosed figure of $352 million.
According to Friday's statement, Bitget announced it would maintain its suspension of withdrawal services in the wake of the security incident, while simultaneously introducing a reward initiative designed to encourage the freezing or retrieval of the compromised funds. Through blockchain analysis and onchain tracking methods, the platform verified that "$387.5 million were transferred to attacker-controlled addresses" — representing an increase of roughly $35 million compared to Thursday's initial disclosure.
The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate. It does not reflect further unauthorized transfers. The incident remains contained and no further unauthorized transfers are possible.
Bitget
Based on information provided by Bitget, the breach encompassed wallet addresses across Ethereum Virtual Machine (EVM) compatible networks, the XRP Ledger, Zcash and TRON blockchains. The compromised digital assets included XRP, Ether (ETH), Tether's USDt (USDT), Zcash (ZEC), USDC, USDT0, XAUt, BNB, AVAX and TRX. The updated incident report made no mention of CEO Gracy Chen's Thursday statements suggesting potential involvement of a North Korean-linked hacking organization in orchestrating the breach.
Despite the upward revision in the total value of assets moved to addresses controlled by the attackers, the Bitget security compromise continues to stand as one of the most substantial breaches experienced by the cryptocurrency sector. In February 2025, threat actors successfully exfiltrated approximately $1.5 billion in Ether from exchange platform Bybit.