Bitget raises Sept. 24 incident estimate to $387.5M, with withdrawal plan due Sept. 26

Bitget raised its estimate of assets transferred to attacker-controlled addresses in the Sept. 24 security incident to about $387.5 million, from $351.6 million. The exchange said the revised total reflects additional Zcash and TRON assets identified during tracing, not a new theft ^{[1] [2]}.

CEO Gracy Chen said the incident was contained and no further unauthorized transfers were possible. Bitget planned to announce a withdrawal-resumption plan by 4:00 a.m. UTC on Sept. 26 ^[1].

Bitget said the activity was highly consistent with methods used by North Korean criminals, while Decrypt reported that Chen described the attackers’ fingerprints as resembling those of Pyongyang ^{[3] [4]}.