On September 28, 2026, cryptocurrency exchange Bitget reopened withdrawals following a devastating $387.5 million security breach. The resumption of services immediately triggered a significant outflow of assets, with nearly 5,000 Bitcoin (BTC) leaving the exchange's tracked reserves in a matter of hours. The massive movement of funds comes as blockchain security analysts observe hackers beginning to launder the multimillion-dollar haul stolen during the exploit.
According to an update from Bitget Chief Executive Officer Gracy Chen, the exchange processed 9,585 withdrawal orders totaling 4,098.036 BTC shortly after resuming Bitcoin withdrawals. The processing of these orders was completed by 17:00 UTC+8 on the day of the announcement. Meanwhile, separate data tracked by decentralized finance analytics platform DeFiLlama confirmed a sharp drop in Bitget's reserve balances as users rushed to secure their assets.
The Aftermath of the $387.5 Million Hack
The reopening of withdrawals marks a critical phase in the exchange's recovery process, though it has exposed the platform to immediate liquidity pressure. When a major cryptocurrency trading platform suffers a security breach of this magnitude, standard operating procedures typically involve freezing all deposit and withdrawal mechanisms to secure remaining assets, patch vulnerabilities, and conduct thorough forensic audits.
However, the period directly following the reactivation of these services is often characterized by high transactional volume. Users, spooked by the initial exploit, frequently seek to migrate their holdings to external self-custody wallets or alternative trading venues. The departure of nearly 5,000 BTC from Bitget's tracked reserves highlights this common post-hack pattern. It is important to note that this report is for informational purposes only and does not constitute financial advice. Investors should exercise caution and conduct their own research when choosing custody solutions for their digital assets.
At the same time, the security landscape is further complicated by the actions of the attackers themselves. On-chain data indicates that the perpetrators behind the $387.5 million exploit have initiated laundering operations to obscure the origin of their illicitly acquired funds. Laundering processes in the decentralized ecosystem typically involve routing assets through various decentralized protocols, mixers, or intermediate addresses to sever the link to the original exploit.
Broad Market Activity Amid Exchange Outflows
While Bitget manages its recovery and security enforcement, the broader cryptocurrency ecosystem continues to navigate shifting liquidity dynamics and institutional accumulation patterns. The movement of Bitcoin is not isolated to security-related incidents; institutional players are actively adjusting their portfolios.
For example, MicroStrategy (recently renamed Strategy), led by Executive Chairman Michael Saylor, has signaled renewed confidence in the primary digital asset by executing back-to-back weekly Bitcoin purchases. This represents the company’s first consecutive weekly buy behavior since June 2026, marking a notable acceleration in accumulation after the firm sold a portion of its cryptocurrency holdings earlier in the quarter. On September 28, the company disclosed that it acquired 1,665 BTC for $142.7 million during the week ending September 27, paying an average price of $85,681 per token.
These contrasting flows—significant outflows from a compromised exchange alongside aggressive programmatic buying by corporate treasuries—illustrate the complex, multi-layered nature of the current digital asset market. While retail and institutional depositors on Bitget prioritize custody security and risk mitigation, long-term corporate accumulators are leveraging market structures to expand their balance sheets. This is not financial advice, and market participants should evaluate custody and investment decisions based on their own risk profiles.
Security Challenges and the Path Forward
The breach at Bitget is part of a broader trend of persistent security threats facing the cryptocurrency sector. As platforms scale and manage larger pools of capital, they remain prime targets for sophisticated threat actors. The loss of $387.5 million places this incident among the more substantial exploits in recent memory, underscoring the ongoing vulnerabilities inherent in centralized exchange architectures and hot wallet management.
According to CryptoSlate's reporting, on-chain security tracking has already flagged the movement of stolen assets. This suggests the hackers are rapidly seeking to obfuscate their digital footprint before exchanges and law enforcement agencies can freeze the stolen funds on external platforms. For Bitget, the immediate priority remains the stabilization of its platform and the reassurance of its global user base.
Resolving nearly 10,000 pending withdrawal orders in a single day demonstrates an operational capacity to meet liquidity demands under stress, yet the long-term impact on the exchange's reputation and reserve depth remains to be seen. Security firms and on-chain analysts are expected to monitor the hackers' addresses closely as they attempt to disperse the stolen millions across the global blockchain network.
💬 Comments0
No comments yet — be the first to share your take on this story.
Comments stay on this page. Sign-in is by email code (no password); advertising, insults, ALL CAPS and signal links are rejected automatically.