Bitget has confirmed that more than $350 million was stolen following a major security breach, according to a report from WatcherGuru posted on September 24, 2026. The disclosure marks one of the largest exchange hacks reported this year and puts fresh scrutiny on the custodial risk carried by anyone holding balances on a centralized trading platform.
The confirmation and what is known
The core fact is narrow but significant: Bitget has publicly acknowledged a loss of over $350 million tied to a hack. As of the time of writing, the confirmation is the primary detail in circulation. Specifics such as the exact attack vector, which wallets or assets were drained, whether the affected funds were hot or cold storage, and the recovery plan have not been detailed in the source available here.
That distinction matters. A confirmed loss figure from the exchange itself is a hard data point. Everything downstream, from how the breach happened to whether user balances are impacted, is unconfirmed until Bitget publishes an official post-mortem. Readers should treat any circulating theory about the mechanism as speculation until the exchange states otherwise.
A large loss by any measure
A $350 million theft sits near the top of the year's incident list by dollar value. For context on scale, exchange and protocol breaches in 2026 have ranged from single-digit millions to figures in this same nine-figure band. A loss of this size can pressure an exchange's reserves, its insurance arrangements, and user confidence at the same time.
The immediate question for account holders is always the same after a breach of this magnitude: are customer funds affected, and will withdrawals continue normally? Until Bitget addresses that directly, the prudent read is caution rather than either panic or dismissal.
The custodial risk that keeps resurfacing
Every large exchange hack lands on the same underlying point. When assets sit on a centralized platform, the platform controls the private keys, and the user holds a claim rather than direct possession of the coins. If the platform is compromised, that claim is only as strong as the exchange's balance sheet and its willingness to make users whole.
This is separate from an earlier incident involving Bitget Wallet, the company's self-custody product, which was hit by a suspected breach that saw roughly $170 million swapped to ETH. The two events involve different products and should not be conflated. One touches a self-custody wallet; this confirmed $350 million loss concerns the exchange side. Together they underscore how many attack surfaces a large operator has to defend.
For users who fund crypto cards from exchange balances, an event like this is a reminder that the money backing a card does not have to live on a trading venue. Cards that spend from your own wallet keep the keys with the user, which removes exchange-level counterparty risk from the funding source. That design does not eliminate risk, since self-custody shifts the burden of key security onto the individual, but it does remove the single point of failure that a centralized breach represents.
Market backdrop
The confirmation arrived during a firm week for major assets. As of September 24, 2026, Bitcoin traded near $84,466, up about 10.4% over the prior seven days, while Ether sat around $2,691 and XRP near $1.54, according to CoinMarketCap data in the signal snapshot. The Fear and Greed Index read 73, in "Greed" territory. A single exchange breach, even a large one, does not automatically move a market in this mood, but confidence effects from a nine-figure loss can take days to show up rather than appearing in the first hour.
Overview
Bitget has confirmed more than $350 million stolen in a major hack, per a WatcherGuru report dated September 24, 2026. The loss figure is the confirmed detail; the attack method, affected assets, and recovery plan remain unstated in the available source. The incident is distinct from the earlier suspected breach of Bitget Wallet and revives the standing question of how much users should keep on any centralized exchange. Anyone holding balances on the platform should watch for an official statement on withdrawals and fund safety before acting, and treat unconfirmed explanations of the breach as speculation.
