On September 25, news emerged that Bitget's Greater China regional head, Xie Jiayin, announced on the X platform that at 2:31 AM Beijing time today, its security system detected abnormal transfers in some hot wallets, prompting the team to initiate an emergency response. Preliminary assessments indicate that the amount involved is approximately $351.6 million. The cold wallets and the majority of the platform's assets remain intact and unaffected, ensuring user fund safety, with losses fully covered by Bitget's user protection fund, which currently exceeds $464 million. The addresses involved in the abnormal transfers have been flagged and reported, and the withdrawal function has been temporarily suspended pending verification, while deposit and trading functions are operating normally. The platform has notified law enforcement and on-chain security agencies to investigate. Bitget stated that it will provide hourly updates and release a complete incident report within 24 hours, including a root cause analysis and corrective measures, without speculating on the attack method until the investigation concludes.
Welcome Back
Click “Sign in” to agree to Cointime’s Terms of Service and acknowledge that Cointime’s Privacy Policy applies to you.
Join CoinTime
Already have an account?
Click “page.Sign up” to agree to Cointime’s <a class="underline" href="#term-of-service">Terms of Service</a> and acknowledge that Cointime’s a class="underline" href="#privacy-policy">Privacy Policy</a> applies to you.
Sign in with email
Sign up with email
Your email
Check your inbox
Click the link we sent to to sign in.
Click the link we sent to to sign up.
Bitget Hot Wallet Experiences Abnormal Transfers, Involving Approximately $350 Million; Withdrawals Suspended
-
Wechat scan to share
Recommended for you
-
Bitget CEO: Recent Platform Attack Not Due to Key Leak, No Accurate Time for Withdrawal Recovery
On September 25, Bitget CEO Gracy Chen publicly addressed the platform's recent attack during a live stream, stating that the platform is currently preparing to restore withdrawals, but there is no accurate timeline for recovery yet. Both internal and external technical teams at Bitget are working to identify the issues and develop solutions, aiming to restore relevant services as soon as possible. Gracy Chen noted that the method of attack in this theft incident differs from previous security events experienced by other exchanges. According to the current investigation, hackers did not execute the attack through key leaks; instead, they bypassed certain systems and initiated withdrawals through the system. She mentioned that a key leak would be the worst-case scenario, but this incident is not one of those. Due to the involvement of multiple cryptocurrencies and blockchain networks in this incident, Bitget cannot directly reopen withdrawals for the time being. Withdrawals will only be restored after confirming that funds are completely secure and a more robust handling plan is established. Gracy Chen stated that the platform has completed a comprehensive loss prevention measure and that no further attacks will occur; withdrawals will be reopened once the security issues are more definitively addressed. -
Revolut Faces Data Breach Again, Involving Third Party DriveWealth
On September 25, BeInCrypto reported that the U.S. brokerage DriveWealth confirmed unauthorized access to its network due to a social engineering attack from September 4 to 5. This breach only involved historical customer records of Revolut prior to a change in trading model, with individual customer information no longer shared in the European Economic Area (including Ireland) after December 2023. Recent users were not affected. The leaked data may include names, email addresses, phone numbers, mailing addresses, employment and identity information, as well as some account numbers; however, passwords, payment card information, bank details, and identification documents were not compromised. DriveWealth has directly contacted the affected customers, and Revolut followed up with an email. Additionally, another incident in September involving a spoofed government email affected approximately 680 customers. -
Bitget Hacker Converts Stolen Funds to 67,982 ETH (Approx. $183 Million) on EVM Chain
On September 25, according to monitoring by Lookonchain, Bitget exchange's hot wallet was hacked on September 24, resulting in a loss of approximately $351.6 million. The hacker has converted most of the stolen funds into 67,982 ETH (about $183 million) on the EVM chain. Bitget CEO Gracy Chen confirmed that the abnormal transfers occurred in some hot wallets and warm wallets, while the cold wallet remains secure. User account balances were not affected, and deposits and trading are normal, although withdrawals have been suspended pending a security review. She stated that all losses are covered by a user protection fund exceeding $464 million. On-chain data shows that the attacker exchanged $19.67 million for 7,111 ETH at about a 5% premium within six minutes. Additionally, Arkham reported that funds were transferred from three hot wallets and at least one cold wallet, contradicting the official claim of 'cold wallet security.' The method of attack has not been disclosed. -
Macron Announces Troop Deployment to Protect Saudi Yanbu Oil Facilities
On the 24th, French President Emmanuel Macron stated that France will deploy troops to protect the oil facilities at Yanbu Port on Saudi Arabia's west coast from attacks by Yemen's Houthi forces, aiming to stabilize oil supply and control rising oil prices. In a joint interview with two French television stations, Macron mentioned that France has completed discussions with Saudi Arabia regarding this matter. The French side will send soldiers and deploy military assets such as radar and defense systems, while also adjusting air force resources stationed in the Middle East according to the evolving situation. He emphasized that this action is intended to protect the oil facilities in Yanbu, not to engage in the related conflict. (CCTV News) -
Brazil Central Bank Requires Reporting of Transactions Over $10,000 to Self-Custody Wallets
On September 25, Bitcoin.com reported that the Central Bank of Brazil has issued resolutions No. 588 and No. 589. Resolution No. 588 mandates that institutions authorized by the Central Bank report transactions 'transferring to or from self-custody wallets' valued at or exceeding $10,000. The relevant data will be submitted to the Financial Activities Control Council (COAF), the anti-money laundering regulatory body, which may lead to the creation of a database of self-custody addresses. Resolution No. 589 prohibits transactions with virtual asset service providers (VASPs) that are not authorized to operate in Brazil and establishes an information-sharing framework. Both resolutions will take effect on October 1, 2026, which is also the deadline for VASPs to obtain operating authorization in Brazil. The Central Bank noted that self-custody wallets are controlled by users rather than VASPs, which 'may reduce the availability of information for monitoring and risk assessment.' Increased compliance and capital requirements have impacted the market: currently, only five VASPs have submitted applications for operating licenses. -
BTC Breaks Through $84,500
Market data shows that BTC has surpassed $84,500, currently reported at $84,508, with a 24-hour increase of 0.07%. The market is experiencing significant fluctuations, so please ensure proper risk management. -
30-Year Fixed Mortgage Rates in the U.S. Surge to 7.45%
On September 25, according to data from Mortgage News Daily, mortgage rates saw a significant increase on Thursday, with the average rate for a 30-year fixed mortgage reaching 7.45%. Other institutions, including Freddie Mac, reported earlier on Thursday that this rate had just surpassed 7%, but that data reflected the average level from the previous week. -
France Plans to Convene G7 to Discuss Releasing Strategic Oil Reserves
On September 25, French President Macron stated in a joint interview with two French television stations on the evening of the 24th that France intends to convene a meeting of G7 member countries to discuss the release of strategic oil reserves in order to stabilize international oil prices. -
Global Bond Index Yields Rise to 4% for the First Time Since 2007
On September 25, driven by rising oil prices intensifying inflation concerns, the average yield in major government bond markets reached 4%, marking the first time since 2007. -
Google, OpenAI, and Anthropic Reportedly Plan to Establish 'Standards Authority for Frontier AI'
On September 25, local media reported that Google, OpenAI, and Anthropic are advancing plans to establish an AI safety standards organization, aiming to launch by the end of this year or early 2027. The organization is tentatively named the 'Standards Authority for Frontier AI' (SAFA) and is planned to operate independently without government oversight. Previously, progress on federal-level AI regulation in the United States has been slow, and the establishment of relevant agencies has also stalled.
Daily Must-Read
-
KeyFlow: Connecting UniKey, AI Agents, and the KEY Value System, Turning Intelligent Services from “Being Called” into “Sustainable Flow”
-
The AI Universe Gateway Is About to Open: KeyFlow Official DApp to Launch Global Public Beta and Genesis Registration on July 29
-
The Invisible Bill: Unpacking the Token Amplification Effect
-
ENI Takes the Stage at WebX Japan and Builds a Bridge from Traditional Capital to the Future Economy
-
GWDC 2026 KOREA: The New Asian Paradigm of Web3 & AI Sets to Debut in Seoul on Sept 29-30, Inviting Global Builders to the Ultimate Developer Summit
-
From User Journey to Consumption Loop: Understanding UniKey’s Product Logic and the Three Core Use Cases of KEY
All Comments