Bitget says $388 million was affected in Thursday’s security breach, not $352 million

Bitget has updated its incident report after Thursday’s security breach, saying about $388 million in assets were affected and that $387.5 million were transferred to attacker-controlled addresses. For high-risk payment teams, the practical point is simple: this is the kind of incident that can force withdrawal freezes, trigger onchain tracing, and turn asset recovery into a bounty-driven exercise.

1. In a Friday update, Bitget said it would continue to pause withdrawals following the breach and had launched a bounty program to encourage freezing or recovering the assets. The exchange said the program is meant to incentivize third parties to help immobilize funds or recover them.
2. Bitget said the revised figure of $388 million reflects a more complete accounting of transfers during the incident, including affected assets on Zcash and TRON that were not included in the initial estimate. The company said the update does not reflect further unauthorized transfers and that “the incident remains contained and no further unauthorized transfers are possible.”
3. Based on onchain tracing, Bitget said $387.5 million were transferred to attacker-controlled addresses. That is about $35 million more than the amount reported on Thursday, which the exchange had put at $352 million.
4. The incident involved addresses on Ethereum Virtual Machine (EVM) networks, the XRP Ledger, Zcash and TRON. Among the assets reported stolen were XRP, Ether (ETH), Tether’s USDt (USDT), Zcash (ZEC), USDC, USDT0, XAUt, BNB, AVAX and TRX.
5. The follow-up report did not address comments made by CEO Gracy Chen on Thursday, when she speculated that a North Korean hacking group may have been behind the attack. Bitget’s update was limited to the transfer accounting and recovery measures.

Bitget’s breach is now one of the larger industry incidents on record. Cointelegraph noted that hackers stole about $1.5 billion worth of Ether from Bybit in February 2025, which gives you the scale benchmark the market is using for these events.