Bitget Hackers Drain $228 Million in 18 Minutes as Arkham Traces Seven Chains

3 min read
Bitget Hackers Drain $228 Million in 18 Minutes as Arkham Traces Seven Chains
PrimeXBT Editorial Team
Reviewed by PrimeXBT

Topics in article

Bitget lost roughly $350 million across seven blockchains on Sept. 24, with $228 million of that total moving out in an 18-minute window, according to blockchain analytics firm Arkham Intelligence. Attackers began converting the stolen assets into ether within minutes and split the funds across new wallets, while Bitget disputes claims that the breach reached its cold storage.

$228 Million Left Bitget in 18 Minutes

Bitget customers could not withdraw funds after attackers drained the exchange on Sept. 24. Arkham traced about $350 million leaving five Bitget wallets across seven chains between 2:31 and 5:23 p.m. EDT: the XRP Ledger, Ethereum, Arbitrum, Optimism, BNB Chain, Avalanche, and Base.

The theft was concentrated in a short window. According to Arkham: "Of the $350M, $228M left Bitget in 18 minutes, from 18:58 to 19:16 UTC." By Sept. 25, the firm had labeled 26 addresses linked to the attackers, letting investigators follow the funds as they move.

XRP Loss Raises a Wallet Classification Dispute

Arkham identified $153 million in XRP as the largest single part of the theft and traced its source to a Bitget cold wallet. Bitget disputes that classification, saying its cold wallets stayed secure and the breach was confined to portions of its hot and warm wallet infrastructure. The two accounts remain in conflict while the investigation continues.

Unlike the ether that attackers dispersed, the stolen XRP largely stayed put. More than 99% of roughly 103 million XRP remained in five wallets early on Sept. 25.

Attackers Convert Assets Into Ether

Within 10 minutes of the theft, attackers began selling stablecoins and tokenized gold for ether, Arkham reported. Funds from Arbitrum, Optimism, and Base bridged to Ethereum by 4:04 p.m. EDT. Arkham estimated that roughly $100 million in non-ether assets became about 36,600 ETH. The attackers then split their holdings among new addresses; eight of those addresses held about 68,300 ETH, worth $183 million, when Arkham published its account, with no outgoing transfers reported from them at that point.

The BNB portion moved more slowly. Arkham traced $6.9 million to 12 unlabeled BNB Chain wallets, reporting deposits of at least $4.7 million to Thorchain and $2 million to Fixedfloat.

Bitget Says Its Protection Fund Covers the Loss

Bitget's security notice put the affected amount at $351.6 million. That figure is roughly twice the $174 million to $183 million reflected in early reports. The exchange says its User Protection Fund holds more than $464 million and covers the loss. Withdrawals stayed paused during the security review, while deposits and trading continued.

Source: Bitcoin News

Trading involves risk.

Most traded markets

XAU / USD
+0.42% 4,291.54
BRENT
-3.3% 101.327
BTC / USD
-0.43% 83,797.6
EUR / USD
+0.08% 1.13889
USTEC
+0.66% 30,640.85
PLTR
+0.15% 191.61
View all markets

Author

PrimeXBT
Our Editorial Team consists of leading experts with a proven record in the fields of trading, cryptocurrencies, blockchain and finance. We thoroughly research the sources of information in order to provide readers with quality content that serves edu...
Read author’s articles
Alert Triangle Risk Disclaimer
Disclaimer: Some past publications may be outdated. We recommend following our news to stay up to date with the latest information. For any questions, feel free to contact our support team via the chat below.
The content provided here is for informational purposes only. It is not intended as personal investment advice and does not constitute a solicitation or invitation to engage in any financial transactions, investments, or related activities. Past performance is not a reliable indicator of future results.
The financial products offered by the Company are complex and come with a high risk of losing money rapidly due to leverage. These products may not be suitable for all investors. Before engaging, you should consider whether you understand how these leveraged products work and whether you can afford the high risk of losing your money.
The Company does not accept clients from the Restricted Jurisdictions as indicated in our website/ T&C. Some services or products may not be available in your jurisdiction.
The applicable legal entity and its respective products and services depend on the client’s country of residence and the entity with which the client has established a contractual relationship during registration.

Today in markets

Browse Crypto News

Register Now

Trading involves risk

Get started in minutes

Our clients love how fast and simple our sign-up is. It takes just a few minutes to get started!

Get Started Get Started
Get started in minutes

Need Help?

Risk Warning:
Trading in leveraged products carries a high level of risk and may not be suitable for all investors.