Bitget Freezes Withdrawals After $351.6 Million Wallet Breach

Crypto exchange Bitget has suspended all user withdrawals following a $351.6 million security breach affecting its hot and warm wallet infrastructure. The exchange maintains that its $464 million user protection fund is sufficient to cover the losses, preventing a direct impact on customer balances.

"Bitget’s systems detected unauthorized transfers at 18:31 UTC on Sept. 24 and that its security team activated emergency protocols immediately," said Gracy Chen, founder of Bitget, in a statement regarding the incident.

How the Breach Occurred

According to an analysis by the Bitcoin Foundation, the unauthorized transfers were not the result of a direct theft of private keys. Instead, attackers compromised a specific backend component that allowed them to manipulate transaction data, which bypassed standard withdrawal verification layers.

The breach was restricted to the exchange's hot and warm wallets, which are internet-connected storage systems used for high-frequency trading and rapid liquidity. Bitget confirmed that its cold storage, which consists of offline wallets used for the bulk of long-term asset custody, remains secure and was not accessed during the event.

Mitigation and Financial Coverage

To address the shortfall, Bitget is utilizing its dedicated User Protection Fund, which the company reports currently exceeds $464 million. This fund was established to provide a buffer against insolvency or security-related asset loss, ensuring that the company can absorb the $351.6 million impact without requiring external capital injections.

What Is at Stake for Users

Withdrawals remain frozen while the exchange conducts a forensic audit of its backend infrastructure to close the vulnerability. The incident highlights the risks associated with hot wallet architecture, which requires a constant connection to the internet to facilitate exchange operations, making it a target for sophisticated attackers.

For the cryptocurrency market, the scale of this breach serves as a reminder of the reliance on centralized security protocols. While the existence of a multi-hundred-million-dollar insurance fund provides a mechanism for recovery, the freeze underscores the liquidity risks faced by users when exchange-level security layers are bypassed.