Bitget will reopen withdrawals in four stages starting Sep. 28, days after a security incident forced the exchange to freeze transfers. The exchange says it has fixed the vulnerabilities behind the breach, while a later account puts the transferred assets at about $387.5 million, up from its first estimate.
Bitget has set 08:00 UTC on Sep. 28 for Bitcoin withdrawals to resume, the first step in a phased reopening following the Sep. 24 incident. Ether and USDT withdrawals follow over the next two days, with other tokens, fiat services and peer-to-peer transfers returning by Oct. 2.
Withdrawals return in four stages
Under the schedule, BTC withdrawals on the Bitcoin network resume at 08:00 UTC on Sep. 28. ETH withdrawals are set for the same time on Sep. 29, covering Ethereum, BNB Smart Chain, Arbitrum, Base and Optimism. USDT withdrawals follow at 08:00 UTC on Sep. 30 across Ethereum, BNB Smart Chain, Solana and Tron, with other tokens, fiat services and peer-to-peer transactions scheduled for Oct. 2.
Bitget did not give a network-by-network list for the remaining tokens in that final stage. Trading and deposits have continued through the freeze, and Bitget says customer account balances have not changed even as it reports unauthorized transfers from its own wallet infrastructure.
Loss estimate climbs from Bitget's first count
Bitget initially estimated about $351.6 million in affected assets after detecting unauthorized transfers on Sep. 24 and said its cold wallets remained secure. In a subsequent account cited by Outlook Money on Sep. 26, the exchange put the value moved to attacker-controlled addresses at approximately $387.5 million, a figure that now includes Zcash and TRON assets absent from the earlier count. Bitget said its tracing work continues, so the number may still change.
The exchange says its technical team has fixed the vulnerabilities tied to the breach, with Mandiant and SlowMist assisting the investigation. Bitget has said its protection fund, which held more than $464 million during the pause, will cover the financial impact. CEO Gracy Chen has also pointed to a possible North Korean connection, citing similarities in IP addresses and VPN use, without confirming an attribution.
Stolen USDC draws U.S. scrutiny
Security researcher Taylor Monahan identified USDC movements she linked to the attacker, including transfers and conversions into ETH, raising questions about whether Circle could freeze the funds. It remains unclear whether Circle received a legal order concerning the addresses involved.
A separate U.S. lawsuit filed after the Drift Protocol exploit alleges Circle failed to stop stolen USDC moving through its cross-chain transfer system, though that claim has not been tested in court. For Bitget customers, the near-term marker stays the Bitcoin withdrawal window at 08:00 UTC on Sep. 28.
Source: crypto.news
Trading involves risk.
Risk Disclaimer
