Bitget withdrawal restart is scheduled for September 28. The exchange paused withdrawals after a September 24 security incident.
Bitget said its technical team fixed the vulnerabilities. The exchange is checking its systems before reopening them.
Why Bitget withdrawal restart matters
Bitget told users to rely on official notices. Customers do not need to take action before withdrawals resume. Trading and deposits continued during the pause. The exchange said account balances did not change.
Bitget withdrawal restart follows security incident
Bitget detected unauthorized transfers on September 24. Therefore, it halted withdrawals while investigating. The exchange initially estimated about $351.6 million in affected assets. It said cold wallets were secure. Its early review found no evidence of a private-key leak.
Mandiant and SlowMist are helping investigate the attack. Mandiant is owned by Google. SlowMist is a blockchain security firm.
Withdrawals return in four stages
First, BTC withdrawals on the Bitcoin network resume at 08:00 UTC on September 28. Second, ETH withdrawals follow at the same time on September 29. These cover Ethereum, BNB Smart Chain, Arbitrum, Base, and Optimism.
Third, USDT withdrawals are set for 08:00 UTC on September 30. These cover Ethereum, BNB Smart Chain, Solana, and Tron. Finally, other tokens, fiat services, and P2P transactions return at 08:00 UTC on October 2.
Network lists matter for customers. A token’s return does not mean every network reopens at once. Bitget named five networks for ETH and four for USDT. It did not give a full network list for remaining tokens.
Loss estimate rises to $387.5M
Bitget’s reported loss has increased. The first estimate was about $351.6 million. A later account put the value at approximately $387.5 million. The new figure includes Zcash and TRON assets. Bitget said tracing continues. Therefore, the figure may change.
The earlier investigation pointed to a possible backend wallet breach. Bitget had not established a final entry point. Its latest statement says the vulnerabilities are fixed.
Investigation and protection fund
Bitget said its protection fund will cover the financial impact. During the pause, the fund held more than $464 million. The exchange said customer balances remained accurate. This statement describes Bitget’s plan to absorb the loss.
CEO Gracy Chen raised a possible North Korean connection. She cited similarities involving IP addresses and VPN services. However, she did not confirm who carried out the attack. No government agency publicly attributed the attack.
USDC transfers draw US attention
Security researcher Taylor Monahan identified USDC movements. She linked them to the attacker. These included transfers and conversions into ETH. Her findings raised questions about whether Circle could block stolen USDC. Circle is the US-based issuer of USDC.
The public account did not establish whether Circle received a legal order. Circle has said it freezes tokens when legally compelled. A separate US lawsuit alleged Circle failed to stop stolen USDC. That allegation is part of a lawsuit. It is not a court finding.
What customers should do
For Bitget customers, the next step is clear. The Bitcoin withdrawal window opens September 28 at 08:00 UTC. Bitget said it will confirm each reopening through official notices. Users should wait for those notices before acting.
