Bitget Says Ethereum, XRP and Other Tokens Were Affected by Hack; No Timeline for Withdrawal Resumption

Global digital-asset exchange Bitget disclosed the scope of losses about 12 hours after a security incident. The company said its cold wallets were not affected by the attack and that withdrawals will resume once safety checks are complete.

On Sept. 25, Bitget Chief Executive Officer Gracy Chen wrote on X, formerly Twitter, that assets affected in the incident included Ethereum (ETH), XRP, BNB, Avalanche (AVAX), Tether (USDT) and USD Coin (USDC).

The affected blockchains include Ethereum, the XRP Ledger, Arbitrum, Avalanche, Optimism, BNB Smart Chain and Base. Among them, the XRP Ledger, or XRPL, suffered the largest losses on a single chain. Bitget said cold wallets across all blockchains had been confirmed safe and were not impacted by the incident.

Bitget said it is in contact with the foundations behind the affected blockchains, and that some have frozen hacker wallet addresses. Chen said internet protocol address activity and on-chain analysis showed the attack closely resembled previous methods used by North Korean hacking groups. The company has reported the matter to relevant authorities and is cooperating with a global investigation, she added.

Bitget also said its non-custodial wallet, Bitget Wallet, which operates on infrastructure separate from the exchange, was not affected by the incident.

The timeline for restoring withdrawals has not been set. Bitget said it is aiming to fully resume withdrawals as soon as possible, but would not promise an unconfirmed recovery schedule. The company said it will announce a specific resumption time once it is finalized.