Cryptocurrency exchange Bitget updated its total loss estimate to $387.5 million following a Sept. 24 wallet breach, while institutional clients using Swiss bank Sygnum maintained isolated collateral off-exchange during suspended retail withdrawals.
Revised Hack Accounting and Suspended Withdrawals
Bitget initially detected unauthorized transfers at 18:31 UTC on Sept. 24, reporting a $351.6 million loss across hot and warm wallet layers. On Sept. 25, the exchange raised the total figure to $387.5 million after incorporating unaccounted Zcash and TRON transfers. Bitget clarified that the revision reflected fuller accounting rather than a new attack vector. Cold wallets remained secure throughout the event, and security firms Mandiant and SlowMist were brought in to assist the investigation.
While deposits and trading functions remained operational, Bitget temporarily suspended user withdrawals, promising an updated plan by Sept. 26 at 04:00 UTC. To reassure users, the exchange pointed to its User Protection Fund holding 5,500 BTC, which was valued at over $464 million on the day of the breach, up from an August month-end valuation near $432 million. Although Bitget confirmed working with industry partners to freeze certain stolen funds, it did not quantify the exact amount recovered. Detailed updates regarding the incident followed earlier reports detailing Bitget's stolen funds estimate and internal security timelines.
Sygnum Off-Exchange Custody for Institutions
Amid the operational disruption, Sygnum highlighted its "Protect" service, which allows eligible institutional clients to trade spot and derivatives on Bitget using collateral held directly at the Swiss bank. Eligible assets—including Bitcoin, Ethereum, stablecoins, and US Treasuries—are stored in segregated, off-balance-sheet accounts that remain bankruptcy-remote under Swiss law.
Under this setup, Bitget mirrors the pledged assets as trading margin without directly taking custody of the collateral. However, Sygnum did not disclose how many Bitget clients utilize the service, the total volume of client collateral held, or whether any Sygnum-held assets were involved in the breach context. Furthermore, while segregated custody reduces wallet theft risk, standard trading and margin settlement still rely on Bitget's central infrastructure.
Key Takeaways
- Breach Total: Revised to $387.5 million from $351.6 million after including Zcash and TRON movements.
- Retail Status: Withdrawals paused while trading and deposits remained operational.
- Institutional Shield: Sygnum Protect maintains institutional trading collateral off-exchange in segregated Swiss accounts.
- Protection Reserve: Bitget's 5,500 BTC fund was valued at over $464 million on Sept. 24.
Why It Matters
The contrast between suspended retail balances and Sygnum's off-exchange custody underscores a growing structural divide in crypto market infrastructure. Institutional traders increasingly demand tripartite and bank-segregated custody models to insulate themselves from exchange operational failures and hot-wallet exploits. As exchange breaches persist, adoption of off-exchange settlement frameworks will likely become a baseline requirement for institutional liquidity providers.
