# Bitget hot and warm wallets drained of $387.5M after zero-day in third-party security appliances

- Severity: Critical · Status: Contained (live)
- Chains: Ethereum, Arbitrum, Avalanche, Optimism, BNB Chain, Base
- Started: Sep 24, 2026 · Last update: Oct 15, 2026 · Reported stolen: $388M
- Who/what: Bitget exchange hot and warm wallets

Attackers exploited a zero-day in two third-party security appliances at exchange Bitget, moved on to its production wallet job server and used a custom withdrawal tool to drain hot and warm wallets on 24-25 September 2026. The confirmed loss is about $387.5 million (first reported as $351.6M) across Ethereum, Arbitrum, Avalanche, Optimism, BSC, Base and the XRP Ledger. Bitget's CEO blamed North Korean hackers, and Bitget said cold wallets and private keys were not compromised. Hacken's Q3 figures say about $387M was covered by Bitget's user protection fund.

## Am I affected?
Bitget account holders: the theft hit the exchange's own hot and warm wallets, and reports say the loss was covered by Bitget's protection fund. Self-custody wallets were not touched.

## What to do now
- Check your balance only by logging in through the app or bookmarked site you normally use.
- Ignore emails, DMs, ads or posts offering 'compensation claims', 'refunds' or 'wallet re-verification'. Never connect a wallet or enter a seed phrase to claim anything from an exchange.

## How to avoid this
- Keep only your active trading balance on any exchange and hold the rest in self-custody.
- Turn on withdrawal-address allowlists and app-based 2FA, and bookmark the official site.

## Sources
- Bitget hacked via zero-day in third-party security products (BleepingComputer, 2026-09-30): https://www.bleepingcomputer.com/news/security/bitget-hacked-via-zero-day-in-third-party-security-products/
- Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist (BleepingComputer, 2026-09-28): https://www.bleepingcomputer.com/news/security/bitget-resumes-bitcoin-withdrawals-after-3875-million-crypto-heist/
- Crypto loses $768M in worst hack month of 2026 (crypto.news, 2026-10-01): https://crypto.news/crypto-loses-768m-in-worst-hack-month-of-2026/
- Bitget, Liquid exploits push Q3 crypto hacks toward $1.2B (Cointelegraph, 2026-10-15): https://cointelegraph.com/news/bitget-liquid-exploits-push-crypto-hacks-near-12b-q3

Full record: https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026 · JSON: https://drains.watch/i/bitget-hot-wallet-breach-zero-day-sep-2026.json

Rules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support.