Bitget Withdrawals After the September 2026 Hack: Status, Timeline and How to Withdraw
Bitget froze every withdrawal on 24 September 2026 after attackers moved $388 million out of its hot and warm wallets, and brought them back in four stages by 2 October. Here is what happened, the restart date by date, what covered the loss, how to withdraw now, and where Bitget stands in Germany, Austria and France.
- Bitget withdrawals are working again. All assets, including fiat and P2P, resumed on 2 October 2026, according to Bitget's incident page, last updated on 4 October.
- On 24 September at 18:31 UTC attackers used a zero-day in a third-party security product to steal internal credentials and forge withdrawal commands. Private keys were not compromised and cold wallets were not touched.
- Bitget says user balances were not affected. Its Protection Fund absorbed the $388 million loss and was refilled to more than $300 million by 30 September.
- Deposits and trading kept running throughout. Only withdrawals stopped, and they restarted in a fixed order: BTC, then ETH, then USDT, then everything else.
- Bitget's terms list Germany, Austria and France as Prohibited Countries. New sign-ups from Germany and France are closed, and existing German users have been told to expect advance notice of any change.
At 18:31 UTC on 24 September 2026, Bitget's systems flagged transfers out of its hot wallets that nobody inside the company had made. Within minutes every withdrawal on the exchange was frozen. For the next three and a half days nothing left Bitget, and it took until 2 October before every asset could be withdrawn again, while trading and deposits carried on as normal. Withdrawals are back now. What matters for anyone with money there is what actually broke, what Bitget used to cover it, and what the restart order says about how the next pause would play out.
Are Bitget withdrawals working again?
Yes. All Bitget withdrawals, including fiat and P2P, have been running again since 2 October 2026. Bitget's incident page, last updated on 4 October, confirms that withdrawals for all remaining cryptocurrencies, fiat currencies and P2P resumed after BTC, ETH and USDT, completing the phased plan.
Deposits and trading never stopped. Bitget's security notice from the night of the incident says both stayed fully operational while withdrawals were paused, which is why open positions could still be managed throughout.
What happened on 24 September?
Attackers used a flaw in a third-party security product to get inside Bitget's systems and send forged withdrawal commands straight to its wallets. According to Bitget's investigation, a zero-day vulnerability in that product gave them internal network credentials. They used those credentials to reach wallet servers, wrote fake withdrawal instructions into the wallet system and slipped past the risk checks that normally run before a withdrawal is recorded.
Bitget detected the transfers at 18:31 UTC and paused withdrawals the same evening. Its first estimate was $351.6 million; the final verified figure is $388 million across 12 wallet addresses, in hot and warm wallets on Ethereum and other EVM networks, the XRP Ledger, Zcash and TRON. Private keys were not compromised, and the cold wallets that hold most platform assets were not affected.
Bitget says it has fixed the vulnerability, reset all internal credentials, tightened access to sensitive permissions and added independent withdrawal verification, with Mandiant and SlowMist supporting the investigation. A formal security report with full technical detail has been announced but not yet published.
- 24 Sep, 18:31 UTCUnauthorized transfers from hot wallets detected. Withdrawals paused; deposits and trading continue.
- 26 SepVulnerability fixed. Bitget publishes the phased restart schedule.
- 28 Sep, 08:00 UTCBTC withdrawals resume. Bitget commits to refill the Protection Fund within a week.
- 29 Sep, 08:00 UTCETH withdrawals resume. Proof of reserves shows 131%.
- 30 Sep, 08:00 UTCUSDT withdrawals resume. Protection Fund back above $300 million.
- 2 Oct, 08:00 UTCAll other tokens, fiat and P2P resume.
The restart, date by date
Bitget restarted withdrawals in four stages between 28 September and 2 October, each at 08:00 UTC, in an order it applied to every user alike. The official schedule, published on 26 September, put Bitcoin first and fiat and P2P last.
The order is worth reading as a plan for any future pause. The most liquid assets on the fewest networks came back first, and everything that depends on banking partners or matching other users came back last. If you ever need money out of an exchange quickly during an incident, the asset you hold decides how soon you get it.
| Date (08:00 UTC) | Withdrawals | Networks |
|---|---|---|
| 28 September | Bitcoin | Bitcoin |
| 29 September | Ethereum | Ethereum, BSC, Arbitrum, Base, Optimism |
| 30 September | USDT | Ethereum, BSC, Solana, Tron |
| 2 October | Other tokens, fiat, P2P | All remaining |
Source: Bitget, Bitget to Resume Withdrawals in Phases, published 26 September 2026.
Were user balances affected?
No. Bitget says every user balance stayed accurate and the loss was paid from its Protection Fund, not from customer assets. The fund was set up in 2022 with 5,500 BTC and a minimum value of $300 million, and it sits apart from the reserves that back customer balances.
Covering $388 million pushed the fund below that floor. Bitget committed on 28 September to refill it within a week and, according to its own announcement, it was back above $300 million by 30 September, with the wallet addresses published so anyone can check them on-chain.
The proof of reserves Bitget published for 29 September showed an overall ratio of 131%, with all 19 covered assets above 100%. Those figures come from Bitget itself; the independent check is the on-chain fund, which you can verify without trusting the announcement.
How to withdraw from Bitget, step by step
A crypto withdrawal on Bitget takes five steps, and the network you pick decides both the fee and whether the coins arrive at all. The account needs to be verified: Bitget restricts deposits, withdrawals and trading on accounts without identity verification.
- 1Open Assets in the app, or the profile menu on the website, and choose Withdraw.
- 2Pick the coin and the on-chain withdrawal option.
- 3Choose the network that matches the receiving wallet or exchange.
- 4Paste the address, add the memo or tag if the receiving side asks for one, and enter the amount.
- 5Check the fee and the amount you will receive, then confirm with your two-factor code.
Bitget shows the network fee and the amount you will receive before you confirm, and both change with the coin and the chain. Turning on the address book whitelist limits withdrawals to addresses you saved in advance, which is worth the extra minute after an incident like this one.
Bank withdrawals have their own price list. Euro withdrawals by instant SEPA cost 1 EUR for individual accounts, dollar withdrawals by SWIFT cost 30 USD, and Brazilian real withdrawals by Pix cost 2.6 BRL, according to Bitget's bank deposit and withdrawal page.
| Currency | Method | Withdrawal fee |
|---|---|---|
| EUR (individual) | SEPA instant | 1 EUR |
| USD (individual) | SWIFT | 30 USD |
| BRL (individual) | Pix, bank transfer | 2.6 BRL |
| MXN (individual) | SPEI | 5 MXN |
Source: Bitget, Bank Deposit and Withdrawal: Limits, Fees, and Processing Times, as published on 2 October 2026. Crypto network fees are shown live in the withdrawal screen.
Bitget in Germany, Austria and France
Bitget's terms list Germany, Austria and France as Prohibited Countries, and new accounts from Germany and France are no longer accepted. We covered that clause in detail in our article on Bitget in the US, because the same sentence that names the United States names the three European countries too.
For France the exit is complete: Bitget ended all services for French residents on 31 March 2026. For Germany Bitget has closed sign-ups and says it will notify existing German users in advance of any further change to the services they can use. That leaves existing German accounts able to withdraw, but with no new users coming in.
If you trade from Germany and are deciding where to go next, the fee question travels with you. Our Bybit vs Bitget comparison covers the licensing gap between the two, and the calculator shows what cashback is worth on your volume at any of the 9 exchanges we cover.
Moving funds after the pause? Take the fee rebate with you
Exchanges pay part of every trading fee back as affiliate commission. Trade Reclaim returns 30 to 50% of it to you in USDT, across 9 exchanges from one account, with no volume threshold.
Frequently asked questions
Are Bitget withdrawals working again?
Bitget withdrawals have been fully restored since 2 October 2026. The restart ran in four stages at 08:00 UTC: BTC on 28 September, ETH on 29 September, USDT on 30 September, and all other tokens, fiat and P2P on 2 October. Bitget's incident page, updated on 4 October, lists the plan as complete. Deposits and trading were never paused.
Did the Bitget hack affect my balance?
Bitget says no customer balance was affected by the September 2026 hack. The $388 million loss came out of hot and warm wallets and was covered by the Bitget Protection Fund, which sits apart from the reserves behind user balances. Bitget refilled the fund to more than $300 million by 30 September. Its proof of reserves for 29 September showed a 131% overall ratio.
Is Bitget safe after the hack?
Bitget's own account is that the breach reached hot and warm wallets only, private keys were not compromised and cold wallets were untouched. The entry point was a zero-day in a third-party security product, and Bitget says it has reset internal credentials and added independent withdrawal verification, with a full security report still to come. The Protection Fund covered the loss and has been refilled. Whatever you conclude, the incident is a reminder to keep only trading capital on any exchange.
Can I still withdraw from Bitget in Germany?
Existing German accounts can withdraw, but Bitget no longer accepts new sign-ups from Germany. Bitget's terms list Germany as a Prohibited Country, and its notice to German users says it will announce any further change to their services in advance. France went further: Bitget ended all services for French residents on 31 March 2026. Austria appears on the same list of Prohibited Countries.
What is the Bitget Protection Fund?
The Bitget Protection Fund is a reserve Bitget set up in 2022 with 5,500 BTC to cover losses from events such as hacks, with a minimum value of $300 million. It is kept separate from the reserves that back customer balances, and its wallet addresses are public so anyone can check them on-chain. In September 2026 it absorbed the $388 million hot-wallet loss. Bitget refilled it to more than $300 million by 30 September.
How much does a Bitget withdrawal cost?
Crypto withdrawals on Bitget cost a network fee that depends on the coin and the chain, and Bitget shows it before you confirm. Choosing a cheaper network for the same coin often lowers the fee, as long as the receiving side supports that network. Bank withdrawals have fixed fees: 1 EUR by instant SEPA, 30 USD by SWIFT and 2.6 BRL by Pix for individual accounts. Check the withdrawal screen before every transfer, because network fees move with congestion.
The Trade Reclaim research desk tracks fee schedules, VIP thresholds and market access rules across the 9 exchanges we cover. Every figure here comes from an exchange's own terms or a regulator's own filing, checked on the date of publication, because a rate copied from a comparison site is a rate nobody verified.
Trade Reclaim earns from exchange referrals and shares most of it back to you as cashback. Education, not financial advice.