Seychelles-based cryptocurrency exchange Bitget detected unauthorized transfers of approximately $351.6 million from its hot wallets on September 24, 2026, prompting an immediate security lockdown and withdrawal pause.
Unauthorized Hot Wallet Activity Triggers Emergency Protocol
At 18:31 UTC on September 24, 2026, Bitget's internal security systems identified unauthorized outflows from the platform's hot and warm wallet layers. In a statement published on X, Bitget CEO Gracy Chen confirmed the breach, emphasizing that the exchange's cold wallets remain fully secure and that user funds are safe.
The Victoria, Seychelles-headquartered platform ranks as the sixth-largest cryptocurrency exchange by processing over $1.1 billion in daily trading volume, according to CoinGecko data. Following the incident, Bitget temporarily paused withdrawals to complete a full security review, though deposits and trading functionality remain fully operational.
On-Chain Data Reveals Multitoken Outflows
Data compiled by blockchain analytics firm Arkham Intelligence showed unauthorized transfers across several cryptocurrencies, including multiple stablecoins. While initial Arkham dashboards omitted Bitcoin, security auditing firm Hacken confirmed on X that Bitcoin was also among the assets moved during the breach.
The incident highlights ongoing security vulnerabilities across exchange infrastructure, following similar security incidents affecting platform funds. Chen noted that Bitget operates a three-tier wallet architecture, which successfully restricted the vulnerability to the hot and warm wallet layers without compromising cold storage reserves.
Key Takeaways
- $351.6 million in cryptocurrency was illicitly transferred from Bitget hot wallets at 18:31 UTC on September 24, 2026.
- CEO Gracy Chen confirmed cold wallets are safe and promised full transparency for every dollar.
- Withdrawals are temporarily paused, while deposit operations and trading remain active for the platform's $1.1 billion daily volume.
Why It Matters
Centralized exchanges remain high-value targets for sophisticated exploiters due to the liquidity pooled in active hot wallet layers. Even as exchanges implement multi-tier architectures to segregate funds, hot wallet keys remain an operational bottleneck for high-frequency trading platforms. Moving forward, institutional and retail traders will closely watch how quickly Bitget completes its security audit, restores full withdrawal capabilities, and reimburses affected treasury reserves.
