Bitget Security Update: Recovery Plans and Lessons for Crypto Users

News briefing · September 28, 2026

Bitget has announced a phased withdrawal restart after its September 24 exchange security incident. The constructive focus is now on verified recovery progress and better custody practices—not on treating an announced schedule as proof that every service is already restored.

What has Bitget confirmed?

In its September 25 update, Bitget revised the affected assets to approximately US$387.5 million, up from an initial US$351.6 million estimate. The exchange said this reflected a fuller accounting of the original incident, not further unauthorized transfers. It said Mandiant and SlowMist were assisting the ongoing investigation. Read Bitget’s official incident update.

What is the withdrawal plan?

Bitget’s published timetable lists BTC for September 28, ETH for September 29, USDT for September 30, and other tokens, fiat and P2P services for October 2, each at 08:00 UTC. These are announced milestones, not independently verified completion dates. Check the platform for the specific asset and network before relying on availability. See the official withdrawal schedule.

What should users and miners take away?

Bitget Wallet separately stated that its self-custody systems were unaffected. The exchange and self-custody wallet use different custody arrangements; the distinction matters. Its notice also warns against fake verification and asset-migration requests. Read the Wallet statement.

For mining operators, this is a useful moment to review payout destinations, access permissions and recovery procedures. Never give a supposed support agent your seed phrase or private key. Use verified channels, and distinguish company assurances from independently confirmed outcomes.

This developing story reflects information checked on September 28, 2026. It is a security briefing, not an endorsement of an exchange or financial advice.