Key Takeaways
- • Bitget experienced $463 million in net customer outflows within 24 hours following the resumption of withdrawals after a $388 million security breach, representing the largest single-day outflow since proof-of-reserves tracking began four years ago.
- • The exchange's user protection fund has depleted from $464 million to below $200 million due to the hack's financial impact, though CEO Gracy Chen committed to replenishing it above $300 million within one week using company capital.
- • Bitget currently maintains $5.7 billion in total reserves, meaning Tuesday's outflows represent over 10% of available assets, signaling significant customer loss of confidence despite the exchange's ranking among the world's top 10 by trading volume.
- • The phased withdrawal rollout—beginning with Bitcoin on September 28, followed by Ether and USDT, with remaining tokens and fiat services resuming October 2—reflects ongoing security measures as the exchange attempts to stabilize operations.
- • Cybersecurity experts have attributed the hack to North Korean-linked threat actors, adding geopolitical complexity to the incident and raising institutional questions about exchange security infrastructure.
Summary
Bitget, a top-10 cryptocurrency exchange by trading volume, faced a severe liquidity crisis on September 29, 2026, as customers withdrew $463 million in assets within 24 hours—the largest single-day outflow recorded since proof-of-reserves tracking began four years ago. The mass exodus followed the exchange's announcement that it would resume withdrawal services after a $388 million security breach that occurred the previous week.
The timing of the outflows directly coincided with Bitget's staged reopening of withdrawal functionality, beginning with Bitcoin on September 28. The company subsequently unlocked Ether and USDT withdrawals, with full services across remaining tokens and fiat operations scheduled to resume October 2. Bitget characterized the phased approach as a security precaution "unrelated to the sufficiency or availability of user assets," according to statements published on the exchange's website.
The customer flight has severely strained Bitget's financial cushion. The exchange's user protection fund—initially cited at $464 million to reassure customers their holdings remained secure—has fallen below $200 million, according to wallet addresses Bitget disclosed as the fund's source. CEO Gracy Chen acknowledged the fund is "being used to absorb the financial impact of the incident" and committed to restoring it above $300 million within one week using company capital. With current reserves of $5.7 billion, the $463 million outflow represents more than 10% of total assets.
Cybersecurity experts have linked the breach to North Korean-affiliated threat actors, elevating the incident beyond a standard operational failure to a state-sponsored attack. Chen said she became directly involved with response efforts immediately upon learning of the hack at approximately 2:30 a.m. Singapore time. As Bitget navigates recovery, the scale of customer withdrawals underscores institutional investor concerns about counterparty risk at major crypto exchanges, even those historically ranked among global leaders in trading volume.
The timing of the outflows directly coincided with Bitget's staged reopening of withdrawal functionality, beginning with Bitcoin on September 28. The company subsequently unlocked Ether and USDT withdrawals, with full services across remaining tokens and fiat operations scheduled to resume October 2. Bitget characterized the phased approach as a security precaution "unrelated to the sufficiency or availability of user assets," according to statements published on the exchange's website.
The customer flight has severely strained Bitget's financial cushion. The exchange's user protection fund—initially cited at $464 million to reassure customers their holdings remained secure—has fallen below $200 million, according to wallet addresses Bitget disclosed as the fund's source. CEO Gracy Chen acknowledged the fund is "being used to absorb the financial impact of the incident" and committed to restoring it above $300 million within one week using company capital. With current reserves of $5.7 billion, the $463 million outflow represents more than 10% of total assets.
Cybersecurity experts have linked the breach to North Korean-affiliated threat actors, elevating the incident beyond a standard operational failure to a state-sponsored attack. Chen said she became directly involved with response efforts immediately upon learning of the hack at approximately 2:30 a.m. Singapore time. As Bitget navigates recovery, the scale of customer withdrawals underscores institutional investor concerns about counterparty risk at major crypto exchanges, even those historically ranked among global leaders in trading volume.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.