Bitget has launched a recovery bounty after revising its estimate of a September 24 wallet breach to $387.5 million, making it the largest publicly reported crypto theft of 2026 so far. The exchange initially estimated losses at $351.6 million before identifying additional affected assets on Zcash and Tron; Bitget said the higher figure reflects a more complete accounting, not a second attack. Attackers apparently compromised a backend wallet system and manipulated transaction data, while the company said private keys were not stolen and cold wallets were unaffected. Circle and Tether blocked an address holding 218,023 USDT and 99,990 USDC, worth roughly $318,000 combined, while other attacker-linked wallets held more than 63,000 ETH, according to MistTrack. Elliptic said the breach was highly likely to be linked to the Democratic People's Republic of Korea, although Bitget has not confirmed the attacker's identity. Bitget said the vulnerability was remediated, customer balances remain intact and its more than $464 million Protection Fund can cover the loss. Withdrawals are scheduled to resume in stages from September 28 through October 2, with Mandiant and SlowMist assisting the investigation.