Crypto exchange Bitget has paused all customer withdrawals after reporting unauthorized transfers of $351.6 million. CEO Gracy Chen stated the company is using corporate reserves to cover the loss, but the abrupt freeze has restricted access for its 120 million registered users, highlighting the persistent security risks in centralized crypto platforms.
Seychelles-based Bitget has suspended all customer withdrawals following a major security breach that resulted in the unauthorized transfer of roughly $351.6 million from its wallets. Bitget CEO Gracy Chen confirmed the incident and stated that the company is using its own corporate capital to address the shortfall and protect user assets.
For the platform's 120 million registered users, the primary concern is the inability to access their digital assets. While the exchange has characterized the pause as a necessary security measure to prevent further unauthorized activity, the move effectively locks user funds, preventing both trading and transfers until service is fully restored.
This incident highlights the recurring security challenges faced by centralized crypto exchanges. Unlike decentralized protocols that allow users to maintain full control of their private keys, centralized exchanges operate as custodians of user funds. This structure makes them attractive targets for cybercriminals looking for large, concentrated pools of digital assets. When a breach occurs, the platform's ability to cover losses often dictates whether user trust can be maintained. The use of corporate capital to cover such a large sum is a direct test of the exchange's financial health and its cash reserves.
The crypto industry has seen multiple large-scale thefts over the years, leading to increased scrutiny from global regulators regarding platform security standards. For investors using centralized platforms, these events underscore the importance of understanding how a platform handles custodial security, proof of reserves, and insurance.
Bitget has not provided a definitive date for when full functionality will return, leaving a large portion of its user base without access to their funds. Moving forward, the most important updates to follow will be the timeline for the resumption of services, details from the forensic investigation into how the breach occurred, and any confirmation from independent security auditors regarding the safety of the remaining funds. The company's transparency during this recovery period will be critical in managing the impact on its reputation and long-term operational viability.