Bitget resumes Bitcoin withdrawals as hacker swaps ETH via THORChain

Written by Helen Partzstaff writerReviewed by Yohan Yunstaff editorWritten by Helen Partzstaff writerReviewed by Yohan Yunstaff editorBitget resumes Bitcoin withdrawals as hacker swaps ETH via THORChainLatest NewsPublishedSep 28, 2026<!–>

Ether withdrawals are scheduled to return Tuesday and USDt on Wednesday as Bitget restores services following last week’s $388 million hack.

–>

Crypto exchange Bitget is resuming withdrawals after a security breach affecting nearly $388 million in assets, as the attacker continues moving stolen crypto through THORChain.

Bitget said it resumed Bitcoin (BTC) withdrawals Monday after suspending them following last week’s security incident, with additional assets and networks set to follow over the coming days.

The Sept. 24 breach compromised part of Bitget’s hot and warm wallet infrastructure, while its cold wallets remained secure, according to the exchange.

Bitget later revised the stolen amount from $351.6 million to $387.5 million after accounting for additional transfers on Zcash and Tron.

Ether and USDT withdrawals next as security checks progress

BTC withdrawals on the Bitcoin network and the BNB Smart Chain resumed first, Bitget CEO Gracy Chen said during a Monday ask-me-anything session.

“We restored BTC first because the withdrawal pipeline is the first to be completed,” Chen said, adding that Ether (ETH) and Tether’s USDt (USDT) would follow as security checks progress.

Related: Bitget clarifies $388M in assets affected by security breach

Under Bitget’s announced schedule, ETH withdrawals are set to resume Tuesday across Ethereum, BNB Smart Chain, Arbitrum, Base and Optimism, followed by USDT on Wednesday across Ethereum, BNB Smart Chain, Solana and Tron. Withdrawals for other assets and peer-to-peer services are scheduled to return Friday.

The schedule applies to all users, with no priority access for institutions, VIP customers or Bitget employees, Chen said.

THORChain says network halt cannot selectively freeze funds

Bitget CEO Gracy Chen has called on THORChain, a decentralized protocol for swapping assets between blockchains, to refuse services to addresses linked to the attack.

Lookonchain reported Monday that the attacker was swapping Ether for Bitcoin through THORChain, as Arkham data showed ETH linked to the attacker flowing into THORChain vaults.

THORChain said Monday that its network halt is an emergency security mechanism that affects the protocol broadly and “is not a selective freeze of specific funds or an individual swap.”

Crypto author Anndy Lian said THORChain can halt trading, stop outbound transactions or pause a connected chain, but those measures affect users broadly. The protocol has no built-in address blacklist, he said, limiting its ability to block specific addresses.

Magazine: THORChain under fire over Bitget, ETH evolves beyond blockchain: Hodler’s Digest

<!–>

Subscribe to daily byte-sized crypto news from Cointelegraph

[–> Subscribe Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.

• Bitget
• Hackers
• THORChain
• Cryptocurrency Exchange
• Hacks
• Bitcoin

More on the subject

<!–>[–>3 hours agoHelen Partz<!–>[–>

<!–>[–>Sep 25, 2026Yohan Yun<!–>[–>

<!–>[–>Sep 25, 2026Helen Partz

<!–>[–>3 hours agoHelen Partz<!–>[–>

<!–>[–>Sep 25, 2026Yohan Yun<!–>[–>

<!–>[–>Sep 25, 2026Helen Partz