Bitget revises breach loss estimate to $387.5 million and offers recovery bounty

  • Bitget revised its September 24 breach estimate to approximately $387.5 million and launched a recovery bounty.
  • The higher figure includes additional Zcash and Tron assets and makes the incident 2026's largest publicly reported crypto theft so far.
  • Withdrawals are scheduled to resume in phases from September 28 through October 2, while Bitget says balances and cold-wallet reserves remain intact.

Bitget has launched a recovery bounty after revising its estimate of the September 24, 2026 wallet breach to approximately $387.5 million, up from about $351.6 million after additional affected assets were identified on Zcash and Tron. The exchange said the increase reflects a fuller accounting of the original incident rather than a second attack, making it the largest publicly reported crypto theft of 2026 so far. Bitget said attackers apparently compromised a backend wallet system connected to parts of its hot and warm wallet infrastructure and manipulated transaction data, while private keys and cold-wallet reserves remained unaffected. The exchange said customer balances remain intact, the vulnerability has been remediated and its Protection Fund, valued at more than $464 million in its initial notice, is intended to cover the financial impact. Trading and deposits continued while withdrawals were paused, with phased restoration scheduled from September 28 through October 2. Mandiant and SlowMist are assisting the investigation, while Bitget has opened a monitoring dashboard and submission portal and called on exchanges, researchers and investigators to help recover the assets.

The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.