Bitget has resumed Bitcoin withdrawals on the Bitcoin network after halting customer withdrawals in the wake of a September 24 security breach. The exchange said BTC withdrawals reopened at 08:00 UTC on September 28, marking the first step in a phased return of withdrawal services.
The incident involved roughly $387.5 million moved to addresses controlled by the attacker, according to the company. Bitget said the breach was linked to a third-party security product that was exploited to obtain credentials and generate fraudulent withdrawal commands.
Four-day suspension ends for BTC withdrawals
The reopening came four days after Bitget suspended withdrawals while it reviewed its systems and worked to contain the breach. During that period, the company continued to allow deposits and trading, while customer withdrawals remained paused.
Bitget said the return of Bitcoin withdrawals followed security checks across its withdrawal infrastructure. The exchange also said the specific vulnerability connected to the attack has been fixed.
Company says no new unauthorized transfers found
According to Bitget, no additional unauthorized transfers have been detected since the incident was contained. The company has said user account balances were not affected by the breach, despite the large outflow tied to the attack.
Bitget also said its User Protection Fund will absorb the financial impact of the loss. The company has not indicated any change to its position that customer balances remain intact.
Attack details point to third-party security tool
In its account of the breach, Bitget said the attackers took advantage of a vulnerability in a third-party security product. That access allegedly allowed them to obtain credentials and forge withdrawal instructions.
The exchange has confirmed that about $387.5 million was transferred to attacker-controlled addresses during the September breach. Bitget said it is continuing efforts to trace the stolen assets and pursue recovery.
ETH and USDT withdrawals are next
Bitcoin withdrawals are the first to come back under Bitget's staged restoration plan. The company said Ether withdrawals are scheduled to resume on September 29, with USDT withdrawals set to follow on September 30 for users globally.
Bitget also said outside security firms are involved in the response. Mandiant and SlowMist are assisting with the investigation as the exchange continues to review the incident and track the stolen funds.
Source: crypto.news