---
title: "Bitget Pauses Withdrawals Following $387.5 Million Multi-Chain Security Exploit"
description: "Attackers routed $387.5 million across multiple blockchains, prompting exchange Bitget to freeze withdrawals and roll out an asset recovery bounty."
url: https://basisdesk.news/news/bitget-pauses-withdrawals-after-388-million-security-breach
published: 2026-10-05T17:11:38.135Z
modified: 2026-10-05T17:11:38.135Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: bearish
tickers: [BTC, ETH, USDT, XRP, ZEC]
tags: [bitget, exploit, hacks, custody, multi-chain]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# Bitget Pauses Withdrawals Following $387.5 Million Multi-Chain Security Exploit

Attackers routed $387.5 million across multiple blockchains, prompting exchange Bitget to freeze withdrawals and roll out an asset recovery bounty.

## At a glance

- **What happened:** Bitget suspended withdrawals after attackers drained $387.5 million in digital assets across multiple blockchains to unauthorized wallets.
- **Why it matters:** The compromise is among the largest exchange exploits in recent history, testing centralized custody resilience across several chains.
- **Who is affected:** Bitget and its platform users holding balances across impacted networks.
- **What's next:** Bitget is deploying a bounty initiative to trace, freeze, and recover the stolen assets.
- **Primary source:** [💵 Arche Capital Insights: The debasement trade survives higher rates](https://archecapital.substack.com/p/arche-capital-insights-the-debasement) — archecapital.substack.com

## Key points

- Bitget halted user withdrawals after $387.5 million in digital assets was transferred to attacker-controlled wallets.
- The security breach spanned Ethereum-compatible blockchains, TRON, XRP Ledger, and Zcash.
- Bitget confirmed the vulnerability has been contained and established a bounty program to freeze and recover stolen assets.

## Editorial remark

- **Context:** Centralized crypto exchanges remain high-profile targets for large-scale exploits, with this breach ranking among the sector's largest incidents alongside major infrastructure compromises such as the $292 million KelpDAO bridge exploit.
- **Impact:** Bitget users face temporary withdrawal freezes while the exchange and external ledger analytics teams work through bounty mechanisms to locate and blacklist attacker addresses across multiple ecosystems.
- **Watch:** Market participants are monitoring bounty progress, on-chain movements from attacker-controlled wallets, and confirmation from Bitget regarding asset recovery.

Cryptocurrency exchange Bitget halted customer withdrawals after unauthorized transfers drained $387.5 million worth of digital assets from the venue [1].

According to an Arche Capital briefing, the compromised funds were transferred directly to attacker-controlled wallets spread across several networks [1]. The breach spanned Ethereum-compatible blockchains, TRON, XRP Ledger, and Zcash [1]. The platform stated that it has successfully contained the intrusion, confirming that no additional unauthorized asset movements remain possible [1]. To retrieve the stolen funds, Bitget has introduced a bounty program focused on freezing and recovering the transferred assets [1].

## Multi-Chain Impact and Recent Precedents

The exploit ranks among the largest attacks recorded against a centralized cryptocurrency venue in recent years [1]. The breach unfolded across diverse chain architectures, exposing capital stored across smart contract environments as well as dedicated payment networks including XRP Ledger and privacy-focused network Zcash [1]. 

At the time of writing, major crypto assets experienced mild downward pressure, with $BTC trading at $85,265 and $ETH trading at $2,695. The Bitget incident surfaces amid elevated institutional and regulatory scrutiny surrounding digital asset custody and infrastructure security [1]. It follows other substantial ecosystem losses, including a $292 million cross-chain exploit that drained 116,500 rsETH from liquid restaking protocol KelpDAO in April [1]. KelpDAO subsequently filed a lawsuit against cross-chain technology provider LayerZero over security endorsement disputes connected to that loss [1].

Bitget's primary operational focus remains centered on its ongoing bounty program to track and freeze the illicit capital across external ledgers [1].

## FAQ

**Which networks were affected in the Bitget breach?**

Unauthorized transfers occurred across several networks, including Ethereum-compatible chains, XRP Ledger, TRON, and Zcash.

**Are user withdrawals currently enabled on Bitget?**

Bitget paused withdrawals following the transfer of $387.5 million to attacker wallets while containment and asset recovery actions take place.

**Has Bitget contained the attack?**

Yes, Bitget announced that the breach has been contained and that no further unauthorized asset transfers are possible.

## Sources

1. [💵 Arche Capital Insights: The debasement trade survives higher rates](https://archecapital.substack.com/p/arche-capital-insights-the-debasement) — archecapital.substack.com, 2026-10-05

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai
