Bitget said Friday that attackers took about $387.5 million in Thursday's breach of the exchange, more than first estimated, and launched a bounty to help freeze and recover funds.
Bitget Hack Losses
In a Friday update, Bitget said the stolen assets included XRP (XRP), Ether (ETH), Tether (USDT), Zcash (ZEC), USD Coin (USDC), USDT0 (USDT0), Tether Gold (XAUt), BNB (BNB), Avalanche (AVAX) and TRON (TRX). It raised its total from an initial $351.6 million after counting transfers on Zcash and TRON that the first estimate missed. The exchange said the incident is contained.
Bitget said it has identified how the attacker bypassed its security controls in the breach detected Sept. 24 and has fixed the underlying vulnerability. Withdrawals remain suspended, with an update due by 4 a.m. UTC on Sept. 26.
Also Read: Ethereum Exchange Reserves Hit Record Low As ETH Trades Near $2,660
Recovery Bounty
Mandiant and SlowMist are assisting the investigation. Partners have already frozen some of the stolen assets, and Bitget will now pay 5% of any frozen or recovered funds to whoever voluntarily made that happen.
It named Bybit's LazarusBounty initiative as a main channel and excluded actions taken under court orders or law-enforcement requests.
Estimates have climbed fast, as on-chain monitors first flagged more than $177 million leaving Bitget wallets before the exchange confirmed a $351.6 million breach and halted withdrawals. The latest figure is more than double that early on-chain estimate.
Read Next: Polygon Hits 11M Payments Per Second In Tests Built For AI Agents
