Bitget resumes Bitcoin withdrawals as hacker swaps ETH via THORChain

Bitget has begun restoring withdrawal services following a security incident on Sept. 24 that compromised portions of its hot and warm wallet infrastructure. The exchange initially reported $351.6 million in affected assets but later increased that figure to $387.5 million after identifying additional transfers on Zcash and Tron. Bitget said its cold wallets were not impacted by the breach. CEO Gracy Chen told users in a Monday ask‑me‑anything session that Bitcoin withdrawals on the Bitcoin network and withdrawals on the BNB Smart Chain were the first pipelines brought back online. She said the BTC pipeline was completed first, which enabled the staggered restart. The exchange provided a schedule for further rollouts: Ether withdrawals across Ethereum, BNB Smart Chain, Arbitrum, Base and Optimism are planned for Tuesday, and Tether (USDT) withdrawals on Ethereum, BNB Smart Chain, Solana and Tron are scheduled for Wednesday. Other assets and peer‑to‑peer services were slated to return by Friday. Bitget emphasized the schedule applies uniformly to all customers, with no priority access for institutions, VIPs or employees. The company framed the phased return as driven by ongoing security checks as teams verified each network’s withdrawal pipeline before reopening it to customers. Meanwhile, blockchain analytics firms reported the attacker moving Ether through THORChain in attempts to swap it into other assets. Bitget’s CEO requested THORChain refuse services to addresses associated with the attack. THORChain responded that its emergency network halt is a broad security measure that cannot selectively freeze individual addresses or swaps; outside analysts noted the protocol lacks an address blacklist and that halting mechanisms affect users generally rather than targeting specific accounts.