Bitget Reopens Withdrawals After $387M Hack: What Users Should Know

Bitget began reopening withdrawals in phases on Monday, September 28, 2026, starting with Bitcoin and planning ETH, USDT, and other assets through October 2. The move follows a security breach now estimated at $387.5 million—higher than initial figures—shaking confidence in one of the industry's larger exchanges.

Timeline recap

The hack occurred earlier in September, contributing to market anxiety alongside macro geopolitical selling. Bitget paused withdrawals while investigating root cause and coordinating with blockchain analytics firms.

Phased reopening is standard crisis playbook: restore core assets first, monitor flows, expand asset coverage as systems stabilize.

What users should do

Salt Index checklist for affected Bitget users:

1. Withdraw to self-custody or trusted cold storage if you still hold funds on-platform—do not wait for full convenience features to return.
2. Rotate credentials—passwords, 2FA seeds, API keys used with Bitget.
3. Document balances—screenshots and export history before and after transfers.
4. Watch official channels only—phishing spikes after exchange incidents.
5. Compare compensation policies—read Bitget's user fund remediation announcements carefully; terms vary by jurisdiction.

Broader exchange risk

2026 continues a pattern of large centralized exchange losses despite improved security marketing. Bitget's scale makes this incident a bellwether for mid-tier exchanges competing on leverage products and altcoin listings.

Investors should stress-test portfolio assumptions:

• What percentage remains on any single CEX?
• Are earn/staking products worth counterparty risk?
• Do you have offline backup plans for API trading bots?

Market impact

Bitcoin absorbed macro shocks over the weekend; Bitget-specific fear appeared contained as phased withdrawals began. Still, exchange risk premia may rise across altcoin pairs listed primarily on affected platforms.

Comparison shopping

If you are evaluating exchanges post-incident, Salt Index suggests weighting:

• Proof-of-reserves transparency and audit frequency
• Insurance and user protection funds
• Withdrawal test history (small pulls before large allocations)
• Jurisdiction and regulatory posture

Verdict

Bitget's reopening is necessary but not sufficient for trust restoration. Until third-party reviews publish and compensation completes, treat the platform as recovering infrastructure—not default custody.

The $387M figure is a reminder that product reviews and security track records matter as much as trading fees. Choose where you hold assets accordingly.