TLDR
Crypto exchange Bitget has rebuilt its Protection Fund above $300 million after a roughly $387.5 million hack, largely absorbing the loss with its own capital.
- Bitget says about $387.5 million was stolen from hot and warm wallets in a sophisticated attack exploiting a third party security product.
- The exchange reports its Protection Fund has been replenished from under $200 million to over $300 million, while customer account balances remained accurate.
- The incident is the largest crypto hack of 2026 so far and highlights growing hot wallet and infrastructure risk for centralized exchanges.
Deep Dive
1. Scale And Mechanics Of The Hack
Investigations by firms such as CertiK and SlowMist put Bitgets loss at about $387.5 million after initial estimates were revised as more networks were counted. Reports say attackers compromised a third party security product, gained privileged internal access, and forged withdrawal commands across multiple hot and warm wallets while cold wallets and private keys were not directly stolen.
Bitget has suggested North Korean groups are a likely culprit, and analytics firm Elliptic has noted behavioral similarities, but attribution remains unconfirmed. Only about $1.1 million has been frozen so far, meaning most of the loss currently looks unrecoverable.
Treat attribution and recovery as uncertain, and focus instead on how the exchange responds in terms of reserves, transparency, and security changes.
2. Rebuilding The Protection Fund And User Impact
Before the attack, Bitgets Protection Fund stood above $464 million. After the theft it reportedly fell below $200 million, then was replenished to more than $300 million using Bitgets own capital, fulfilling a pledge to restore the fund within a week according to Bitgets update. The fund is described as an extra user backstop, separate from reserves backing customer account balances.
Bitget states that user balances were accurate and unaffected and cites a 131 percent reserve ratio across 19 assets in a recent proof of reserves snapshot. However, proof of reserves is not a full audit, and access to the Protection Fund depends on Bitgets assessment of claims, so replenishment does not automatically guarantee every loss will be compensated.
For Bitget users, immediate solvency risk looks contained, but real protection depends on how claims are handled and whether disclosures are independently verified.
3. Broader Security And Market Context
The Bitget hack is now the largest single crypto security incident of 2026, accounting for about 31 percent of Q3 losses in a quarter where total losses reached $1.26 billion. September alone saw roughly $766.49 million stolen across dozens of hacks, underscoring a rising trend in large scale exploits.
The attack also shows how dependencies on security vendors and hot wallet infrastructure can create systemic risk even for major exchanges. Investigators traced malicious activity back weeks before funds moved, indicating that compromise can persist quietly until exploited at scale.
When using centralized platforms, it is increasingly important to monitor security incidents, proof of reserves cadence, and how exchanges segregate and protect hot, warm, and cold storage.
Conclusion
Bitgets decision to rebuild its Protection Fund above $300 million and publicly detail reserves reduces immediate confidence shock after a $387.5 million loss, but it does not eliminate underlying custodial risk. For crypto users, the key takeaway is that even large exchanges can face sophisticated infrastructure attacks, so venue choice, diversification, and scrutiny of security and disclosure practices matter as much as headline fund sizes.
CoinsKid.Com