Crypto
Bitget Lost $352 Million to Spoofed Authorizations, and Its $464 Million Protection Fund Covered the Loss
The biggest exchange incident of the year came from tricking the system itself. On Thursday, Bitget disclosed $351.6 million in unauthorized transfers from its hot and warm wallets, which chief executive Gracy Chen confirmed publicly. The figure makes it potentially the largest exchange incident of 2026, exceeding the Liquid Network's $320 million loss earlier this month. Cold wallets stayed secure, deposits and trading stayed online, and withdrawals were paused while the security review runs its course, with a full incident report promised within 24 hours.
The attack method is the part worth studying. According to CoinDesk's reporting, the attackers compromised a backend system inside Bitget's wallet infrastructure and spoofed transaction data to trigger the exchange's own authorization process. Chen said a private key compromise has been ruled out. The attackers convinced the exchange's own machinery to open the door, a more sophisticated and more instructive kind of breach.
Here is where the story turns into a case study in preparation. Bitget's user protection fund holds $464 million, comfortably covering the exposed amount, and the exchange said the fund covers the loss. Arkham researcher Emmett Gallic traced the movement across three hot wallets and one cold wallet spanning ETH, BNB, AVAX, and USDT0, all consolidated into a single address. The exchange's BGB token dipped on the news and recovered to down 2.9 percent by press time. Bitcoin slipped 0.29 percent and ether 0.2 percent over 24 hours. The market priced the incident as exchange specific and moved on.
That calm is the real headline. Altcoins rallied across the board while bitcoin consolidated near $84,000, with 93 of the 100 CoinDesk 100 constituents higher over 24 hours. The CoinDesk Computing Index jumped 9.5 percent, the DeFi Select Index rose 8.7 percent, and CoinMarketCap's altcoin season index hit 56 out of 100, its highest in more than three months. Quant surged 39 percent to $98.93, Ondo added 32 percent, and Chainlink climbed 12 percent to around $14. Friday's Deribit expiry, more than $17 billion in BTC and ETH options, passed quietly.
For readers holding crypto on exchanges, the lessons are concrete. Prefer venues with published, funded protection reserves, keep the bulk of holdings in self custody, and read market reactions for what they are. A market that shrugs at a $352 million incident because the fund covered it and the keys stayed in their vaults is a market growing up. The funds were protected. The incident was contained. And the industry just got a live demonstration that preparation is what defines the next era of exchange security.
Quick answers
What is this story about?
The biggest exchange incident of the year came from tricking the system itself. On Thursday, Bitget disclosed $351.6 million in unauthorized transfers from its hot and warm wallets, which chief executive Gracy Chen confirmed publicly. The figure makes it potentially the largest exchange incident of 2026, exceeding the Liquid Network's $320 million loss earlier this month. Cold wallets stayed secure, deposits and trading stayed online, and withdrawals were paused while the security review runs its course, with a full incident report promised within 24 hours.
Why does this story matter?
For readers holding crypto on exchanges, the lessons are concrete. Prefer venues with published, funded protection reserves, keep the bulk of holdings in self custody, and read market reactions for what they are. A market that shrugs at a $352 million incident because the fund covered it and the keys stayed in their vaults is a market growing up. The funds were protected. The incident was contained. And the industry just got a live demonstration that preparation is what defines the next era of exchange security.
Sources
- CoinDesk on the Bitget incident and market reaction
- Binance Square news roundup on the Bitget incident
New to crypto? Read the crypto glossary, browse frequent questions, read our story, or explore the story archive.