BITGET STARTS PHASED WITHDRAWAL RESUMPTION FOLLOWING $388 MILLION EXPLOIT
Bitget began restoring withdrawals in stages after an exploit on September 24 drained ~$388 million from its hot and warm wallets, the largest reported crypto theft this year. BTC withdrawals resumed September 29 at 8 AM UTC, with ETH following September 29, USDT on September 30, and all remaining assets, fiat, and P2P by October 2. Bitget said an attacker exploited a vulnerability in a third-party security product to obtain internal credentials and send fraudulent withdrawal commands, bypassing risk controls. Private keys, cold wallets, and user balances weren't affected. Losses will be fully covered by Bitget's 5,500 BTC User Protection Fund. Bitget said it suspects the attackers were "sophisticated" and "state-backed," pointing to North Korea.