Nine Figures Left Bitget's Hot Wallets and the Exit Closed Behind It
The loss fits inside a $464 million fund. The exit was paused as a precaution.
At 18:31 UTC on September 24, 2026, Bitget’s systems flagged transfers from some of its hot wallets that no one had approved[1]. Bitget put the funds hit at about $351.6 million[2]. Its own notice labels the wallets: part of the hot and warm layers, with cold wallets still safe[3].
Withdrawals were paused for a safety review[4]. Deposits and trading stayed open[5]. The loss sits against a User Protection Fund holding over $464 million, which the notice says covers the full amount[6].
What to do: no action needed — the notice says user funds are safe and the full loss falls within that fund[6].
Who gains, who loses
Receipts
Bitget detected unauthorized transfers from some of its hot wallets at 18:31 UTC on September 24, 2026.
“At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets.”
Bitget estimated the affected funds at approximately $351.6 million.
“- Estimated funds affected: approximately $351.6 million”
Bitget said the breach affected only part of its hot- and warm-wallet layers, while its cold wallets remained secure.
“Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers.”
Bitget temporarily suspended withdrawals pending a security review.
“Withdrawals temporarily suspended as a precautionary measure, pending security review”
Bitget kept deposits and trading operational while withdrawals were paused.
“Deposits and trading remain fully operational”
Bitget said its User Protection Fund held over $464 million and covered the full amount of the reported loss.
“User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.