news · Bitget · Security · Exchanges
Bitget Begins Phased Withdrawal Restoration After Security Incident
Bitcoin withdrawals return first as Bitget starts a four-stage restoration process; the forensic investigation remains ongoing.
Bitget has begun a phased restoration of withdrawals after the September 24 security incident that led the exchange to suspend outbound transfers while it reviewed its wallet infrastructure.
Under the company's published timetable, Bitcoin withdrawals on the Bitcoin network are scheduled to return first at 08:00 UTC on September 28. Ether withdrawals across Ethereum, BSC, Arbitrum, Base and Optimism are scheduled for September 29, followed by USDT across Ethereum, BSC, Solana and Tron on September 30. Other tokens, fiat withdrawals and P2P services are scheduled for October 2. Each stage is set for 08:00 UTC.
What Bitget says has changed
Bitget says the vulnerability involved in the incident has been identified and remediated. Its security and technical teams are conducting additional validation across the withdrawal stack, with Mandiant and SlowMist supporting the investigation.
The exchange also says user account balances remain unaffected and that its Protection Fund will cover the financial impact. Those statements remain company claims rather than conclusions from a completed independent audit.
Trading and deposits continued while withdrawals were paused. Bitget says the incident is contained and that no further unauthorized transfers are possible.
Restoration is not a completed postmortem
The reopening schedule is a material operational milestone because it establishes a dated path back to normal service. It does not, however, close the incident.
A complete assessment still requires a final reconciled loss figure, a detailed explanation of the compromised backend system, disclosure of the controls added after remediation and independent evidence that the affected infrastructure is safe across every supported network.
Users should verify withdrawal availability inside Bitget's official app or website and remain alert to impersonation accounts, unsolicited recovery services and phishing links that exploit the incident.
Until the forensic work is complete, the defensible conclusion is narrow: Bitget has started restoring access in stages, but the final technical and financial accounting remains unresolved.