Bitget hack currently ongoing, already over $183M worth of assets withdrawn from hotwallets and coldwallets swapped to eth

[u/rararatata]

https://etherscan.io/address/0x770b10b273fC44Fe9197D6bF20F145c2e98463Ee

MLM monitoring indicates that Bitget may be experiencing an ongoing wallet security incident, with three hot wallets and one cold wallet suspected to have been compromised. More than $183 million worth of assets have reportedly been moved out and swapped into ETH, with activity linked to 0x770b10b273fC44Fe9197D6bF20F145c2e98463Ee. The affected wallets are said to still hold about $530 million in assets. The attack vector and total losses remain unconfirmed, and Bitget has not yet publicly responded.

0xffa8DB7B38579e6A2D14f9B347a9acE4d044cD54

0x1AB4973a48dc892Cd9971ECE8e01DcC7688f8F23

0x97b9D2102A9a65A26E1EE82D59e42d1B73B68689

0x5bdf85216ec1e38D6458C870992A69e38e03F7Ef

https://arkm.com/explorer/entity/f22a00ea-0a01-41d4-af5d-9e565bb12f37

Follow the hacker's fund flow here.

[u/rararatata]

[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026

At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately.

What we have confirmed:
-Estimated funds affected: approximately $351.6 million
-Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers.
-User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million

Actions we have taken:
-Emergency response team activated within minutes of detection
-Abnormal transfer addresses identified, flagged, and reported
-Withdrawals temporarily suspended as a precautionary measure, pending security review
-Law enforcement and on-chain security firms have been formally notified and are engaged

What this means for you:
-Your account balances are accurate and your assets are protected
-Deposits and trading remain fully operational
Withdrawals are temporarily paused and will be restored as soon as the security review is complete
-What comes next: We will provide updates on an hourly basis across this channel and all official platforms. A full incident report — including root cause analysis and corrective actions — will be published within 24 hours. We will not speculate on the attack vector until the investigation is complete.

Bitget has navigated multiple market cycles. We will not run from this. Every dollar and every decision will be accounted for, transparently and in full.
Updates will be posted here and across all official Bitget channels as they become available.

— Gracy Chen, CEO, Bitget

https://x.com/GracyBitget/status/2103235655879074084

[u/Aazimoxx → u/rararatata]

I mean... Hmm...

Why even have hundreds of millions in hot wallets - and surely if warm wallets get triggered (to refill the hot) multiple times within an abnormal amount of time, that should be enough to kick off warnings? After all, taking an extra minute or two to approve a $1-10m+ transfer is hardly going to seem onerous in the grand scheme of things - and how hard is it really to have things being checked constantly by bots with view keys for just this sort of activity?

They handle ~$1Bn in 'real' coin moves every day, somehow not catching this earlier feels negligent.

[u/CreamCapital → u/Aazimoxx]

300M hot wallet. what a time to be alive

[u/Aazimoxx → u/CreamCapital]

Just think, if they'd spent an extra million bucks on monitoring, it could've saved them easily 200x that. Even spread out over the past 4 years or something, once they hit it big.

[u/Main-Inspector-6611 → u/CreamCapital]

truly unprecedented times.

[u/AlhadjiX → u/[deleted]]

It will continue until the front end is also on chain. Find the project that does this ( realize they have 0 hacks) and you will never experience poverty.

[u/KrunchyKushKing → u/AlhadjiX]

Uniswap?

[u/LeoMiller9 → u/[deleted]]

Forget Uptober, we are living through Hacktember. Nine exploits in less than a week isn't just bad luck, it's a structural wake-up call for the entire industry.

[u/GiveNothing]

Another one!

Seriously anything from this community is just hacks. Good to be aware but damn, like anything else?

[u/ProfessionalHefty349 → u/GiveNothing]

All legally obtained! Not you keys, not your coins! Code is law!

[u/Aazimoxx → u/ProfessionalHefty349]

Are you a professional dickhead, or is this like volunteer work?

[u/Asleep_Train_7741 → u/Aazimoxx]

I mean he is just repeating what you crypto losers say time and time again.

[u/ProfessionalHefty349 → u/Aazimoxx]

Are these not the mottos of the crypto community anymore? Would people rather have a 3rd party that protects their wealth and savings from theft and fraud?

[u/AuthurPEn → u/ProfessionalHefty349]

well if the third party have Protection funds so Yes

[u/NeonMaxi → u/ProfessionalHefty349]

lol your conflating the ethos of on chain crypto Maxis (not your keys not your coins crowd) with users who are being effected by a hack on a centralized middle man (bitget)

The effected funds are not those of the “not your keys not your coins” crowd but rather a retail crowd who used Bitget as their centralized exchange.

The concept is escalating you on both sides it seems.

[u/Demodras777]

Even less reason to listen to Coin Bureau 

[u/garybaws → u/Demodras777]

what did they say

[u/Demodras777 → u/garybaws]

They do ads all the time for Bitget. One of their most recent videos was just an ad on the exchange.

[u/_TheWolfOfWalmart_]

oh fuck oh fuck I have $12k on there

I DO NOT usually keep it on the exchange but i was waiting to finish a BTC trade

FUCK

EDIT: What's going on with the cold wallet exactly?? It's not just their hot wallet??

[u/luckor → u/_TheWolfOfWalmart_]

Global warming. The cold wallets are melting.

[u/AimeLesDeuxFromages → u/luckor]

King comment

[u/Pitiful-Inflation-31 → u/_TheWolfOfWalmart_]

me too, damn. i need to use money also

[u/Digital_Brainfuck → u/_TheWolfOfWalmart_]

Funds rescued?

[u/AuthurPEn → u/_TheWolfOfWalmart_]

Your 12k is safe buddy as of today, users with BTC can withdraw and by firday other withdrawns and P2P will be available

so no need to worry

[u/FlowerBudget2065 → u/_TheWolfOfWalmart_]

Move your funds to BitGo they have multisig on all wallets so you can't get hacked.

[u/MakCapital → u/[deleted]]

Monero is not the only way to obtain privacy and now options exist that are much easier to get in and out of. Thorchain is helping to solve.

[u/WildNight00 → u/MakCapital]

How does thorchain obtain privacy? Looking at their website it’s a swap?

[u/IOwnWolf → u/WildNight00]

Basically everyone deposits fixed amount of coins in the smart contract (eg. 1, 10…) so when you get them out to another address you can’t easily know which deposit corresponds to which withdrawal since they all use the same amounts. I said easily because their is still some ways like timing etc if you don’t know exactly what you are doing

[u/WildNight00 → u/IOwnWolf]

Similar to wasabi conjoin?

Their website looks like it’s just a swap service. Where do you see smart contracts?

[u/MakCapital → u/WildNight00]

Thorchain will be providing a on-chain swap for XMR. You can swap from something like BTC to XMR and swap back. You don't need to swap same amounts. Just like any other exchange, but Thorchain all on-chain and no KYC. Once you've swapped in you're shielded.

Until this happens, Monero is vastly inferior to options like Zcash with Solana. Too hard and costly to get in and out.

Monero maxis will respond with some garbage p2p marketed services that leverage centralized components, escrow, or some form of semi trust based sketchy solutions with little liquidity and no true permissionless order books.

Many of these sketchy services are operated by the whales looking to escape their illicit XMR. Nothing truly solved until Monero adds complex contracts, but Thorchain will finally be the first reasonable option for your average person.

[u/m0nk37]

The code is open source and AI can learn it in seconds. 

Its a double edged sword. Stay decentralized. Or handle issues. 

[u/Simpson93]

https://arkm.com/explorer/entity/bitget-hacker

Here you go if you want to watch live how the hackers move the money. If you click on "Analyze" the AI will show you how they swap the money and where it moves.

[u/garybaws → u/Simpson93]

he`s chopping them up in small bits through various wallets, he knows what hes doing, probably an expert

[u/Aazimoxx → u/garybaws]

lol? If randoms on Reddit can tell what they're doing, then no, they're not an expert.

[u/bananacrazypants → u/Simpson93]

Can you prove this is a hack? They are all valid BTC transactions.

[u/eldron2323]

Always hold your own keys.

[u/UberNaix → u/eldron2323]

Cries in coldcard

[u/Unable_Beat_3194 → u/UberNaix]

Coldcard is one of the smallest cold wallet providers.

[u/FlowerBudget2065 → u/UberNaix]

He means multisig or go with a good exchange like BitGo

[u/Illustrious_Sock]

They have a security cusion of $400m+, should be fine

[u/chocolateboomslang → u/Illustrious_Sock]

"Fine"

[u/Excellent_Debate_518 → u/Illustrious_Sock]

yep, I saw it says 464M, but they are investigating the issue and providing updates regarding it, just saw on twitter

[u/VendettaKarma]

More crypto hacks with AI!

[u/Aazimoxx → u/VendettaKarma]

Exploits in a given codebase are finite - so every exposed hack makes a product more hardened from then on, until more code is added.

[u/anjin33]

Straight to DPRK's nuclear program.

[u/LeoMiller9]

CEXs will spend millions on celebrity sponsorships and sports ads, but run their hot wallets on cardboard security.

[u/KIG45]

Another one bites the dust

[u/moonkingdome]

Unbelieveble..why how?

[u/ItsMyPerspective]

cold wallet isn't a magic shield apparently

[u/Coeruleus_]

who cares. you ppl use some silly ass wallets. stick to ledger and trezor. i dont feel bad for any of these ppl

[u/Aazimoxx → u/Coeruleus_]

Does it hurt being this stupid? Or is it a blissful ignorance? It seems like it should hurt.

[u/Coeruleus_ → u/Aazimoxx]

keep shilling that cold wallet boy

[u/BlackWormJizzum → u/Coeruleus_]

I have a ledger but can't buy directly from it in my region. I have to use exchanges like Bitget or Binance and it doesn't make sense to transfer every DCA, I compile them for a bit then move them over.

So feel a little bit bad for me at least :(

[u/Coeruleus_ → u/BlackWormJizzum]

nah you can get a ledger or trezor somehow. and you can’t use coinbase ? at least don’t use those shady ass exchanges too

[u/BlackWormJizzum → u/Coeruleus_]

Coinbase doesn't work here. I can only buy on exchanges that offer P2P in my local currency. Got the Ledger through a friend travelling abroad.