TLDR
Bitget has resumed or scheduled the full resumption of withdrawals after a roughly $387.5 million hot wallet hack, while saying user balances remain intact and its protection fund has been rebuilt.
- Bitgets breach saw about $387.5 million drained from hot and warm wallets, leading to a temporary suspension of withdrawals.
- The exchange says its Protection Fund is back above $300 million and customer balances were unaffected, with reserves reportedly above 100 percent for covered assets.
- The incident highlights rising centralized exchange security risk and the need for users to monitor proof of reserves, fund coverage terms and withdrawal reliability.
Deep Dive
1. Scale Of The Hack And Withdrawal Restart
Blockchain security firms estimate the Bitget (exchange) breach at approximately $387.5 million reaching attacker controlled addresses after an initial lower figure was revised with tracing data, making it one of the largest exchange hacks to date. Reports say compromised third party security software gave attackers privileged internal access to hot and warm wallet infrastructure, allowing forged withdrawal instructions without taking private keys. In response, Bitget suspended withdrawals, then reopened Bitcoin, Ether and USDT and scheduled remaining crypto, fiat and peer to peer withdrawals around October 2 at 08:00 UTC, according to its reopening plan.
Service restoration reduces immediate access risk, but the scale of the exploit shows that hot wallet compromises can remain undetected for weeks before funds move.
2. Protection Fund, Reserves And User Impact
Bitget says its Protection Fund, valued at more than $464 million before the theft, fell below $200 million and has been replenished to over $300 million from the companys own capital, separate from customer reserves. The exchange and media coverage state that user account balances were not reduced, and a recent proof of reserves snapshot reported an overall reserve ratio of 131 percent across 19 assets, with each above 100 percent. At the same time, executives acknowledge they expect to recover little of the stolen funds, with only about $1.1 million frozen so far, meaning the loss is largely absorbed by the platform rather than clawed back from attackers.
If Bitgets disclosures are accurate, users are currently made whole, but protection relies on the exchanges solvency and internal policies rather than guaranteed external insurance.
3. Industry Risk And What To Watch
Security firms note that the Bitget hack alone accounted for roughly 31 percent of third quarter 2026 crypto security losses, which totaled about $1.26 billion across hundreds of incidents. September was the worst hack month of the year, with Bitget and the Liquid Network exploit together representing the bulk of losses. For users, key signals to track are whether exchanges publish timely, verifiable proof of reserves, whether they maintain clear, funded insurance or protection pools, and how quickly withdrawal pauses resolve after incidents. Independent audits and transparent post mortems would materially improve confidence but are not yet standard.
Centralized exchange risk is rising even as services resume, so many users treat exchanges as short term trading venues and keep longer term holdings in self custody with hardened security practices.
Conclusion
Bitgets restoration of withdrawals after a roughly $387.5 million hot wallet hack shows that a large exchange can absorb a major security shock without immediately haircutting user balances. At the same time, the incident reinforces that exchange safety depends on ongoing operational security, proof of reserves quality and protection fund robustness, not on the absence of hacks. Watching how Bitget and peers upgrade controls and transparency after this event will be important for anyone relying on centralized platforms for custody or liquidity.
CoinsKid.Com