Bitget Says Ethereum, XRP and Other Assets Were Affected by Hack; Withdrawal Resumption Timing Unclear

Global digital-asset exchange Bitget disclosed the extent of damage from a security incident about 12 hours after the attack. It said its cold wallets were unaffected and that withdrawal services would resume once their safety is confirmed.

On Sept. 25, Bitget Chief Executive Officer Gracy Chen wrote on X, formerly known as Twitter, that assets affected by the incident included Ethereum (ETH), XRP, BNB, Avalanche (AVAX), Tether (USDT) and USD Coin (USDC).

The affected blockchains included Ethereum, XRPL, Arbitrum, Avalanche, Optimism, BNB Smart Chain and Base. Among individual blockchains, XRPL is understood to have suffered the biggest losses. Bitget said all cold wallets across every blockchain had been confirmed safe and were not affected by the attack.

Bitget said it was in contact with the foundations behind the affected blockchains, adding that some had frozen the hacker's wallet addresses. Chen said internet address activity and on-chain analysis showed the attack method closely resembled previous patterns used by North Korean hacking groups. She added that the company had reported the matter to relevant authorities and was cooperating with a global investigation.

Bitget also stressed that its non-custodial wallet, Bitget Wallet, which operates on infrastructure separate from the exchange, was not affected by the incident.

The timing for the full restoration of withdrawals has not been decided. Bitget said it aims to fully resume withdrawals as soon as possible, but would not promise a recovery timeline that has not been confirmed. It said it would announce a specific reopening schedule once it is finalized.