News linked to both this project and an event.
Odaily Report: Bitget Wallet has officially launched its Virtual Account feature, allowing users to open a real USD or EUR account for free within the wallet without requiring US or EU residency status, enabling them to directly receive salaries, freelance income, and cross-border remittances.The feature is supported by licensed banking partner Noah for compliance, is globally available, and can be set up within minutes after completing KYC. It supports major receiving channels including ACH, Fedwire, SWIFT, and SEPA, with fees significantly lower than traditional remittance services. After users transfer USD or EUR to the virtual account, incoming funds are automatically and instantly converted to stablecoins, which can be directly used for wealth management within the wallet, crypto card spending, and QR code payments.This move marks Bitget Wallet's payment ecosystem extending from the "spending side" to the "receiving side," building a complete monetary account system covering receiving, savings, wealth management, and spending. Currently, Bitget Wallet serves over 100 million users globally, and the launch of virtual accounts is a key step in advancing its Everyday Finance strategy, aimed at bringing bank-grade receiving capabilities into the self-custody wallet ecosystem.
Odaily reports: According to Bitget's official announcement, the platform has announced the acquisition of Bangkok-based digital asset exchange and broker GMO-Z.com Cryptonomics (Thailand) Co., Ltd. The acquisition involves all shares of the target company held by shareholders including GMO Internet and its related subsidiaries.GMO-Z.com Cryptonomics (Thailand) holds a Thai digital asset exchange and brokerage license. The acquisition will leverage its existing compliance foundation and local market experience to strengthen Bitget's localized operations in Thailand and further enhance its strategic layout in the Southeast Asian market.Bitget CEO Gracy Chen stated that Thailand is an important digital asset market in Southeast Asia, and this acquisition will help Bitget establish a localized operational system, gradually expanding the application of its global trading services in the Thai market while complying with local regulatory requirements.
Odaily News: According to an official announcement, Bitget has listed 108 stock spot rTokens, including rTCEHY (Tencent Holdings ADR), rBYDDY (BYD ADR), rXIACY (Xiaomi Group ADR), and rVWAGY (Volkswagen ADR). As of now, the Bitget platform supports a total of 3,035 rTokens.It is reported that rTokens, identified by the letter "r" plus the stock ticker (e.g., rNVDA for Nvidia), are issued by Reality, a licensed RWA protocol under Bitget, through a partnership with compliant broker Alpaca to directly connect to global liquidity pools such as Nasdaq and the NYSE. Their features include: underlying assets backed by 1:1 reserves and custodied by licensed custodians, stock dividends distributed 1:1 in token form, support for synchronous mapping of corporate actions (stock splits and reverse splits, etc.), and holdings can serve as joint margin for the unified account and USDT-margined futures, allowing users to hold global stock assets while still managing funds flexibly.
Odaily reports: Cryptocurrency exchange Bitget has announced that it will cease providing services to certain users through a one-time measure. Bitget stated that user funds remain safe during the related service adjustments, and the platform will continue to operate.Affected users will receive follow-up steps, relevant deadlines, and fund withdrawal arrangements via email, in-app messages, and/or push notifications. Users who have not received official notifications from Bitget may continue to use their accounts normally.Bitget's customer support team will assist users with pending orders, withdrawals, and other account issues during the process, and reminds users to use only official channels and to beware of phishing links, impersonation accounts, and unverified information.On September 25, Bitget confirmed an unauthorized transfer and temporarily suspended withdrawals to investigate a security breach. Subsequent disclosures revealed that the incident involved approximately $388 million in stolen assets. (Cointelegraph)
Xie Jiayin, Head of Bitget Greater China, posted on X sharing his thoughts from attending Token2049 Singapore. First, users are becoming increasingly professional and have begun to reverse-define products—demands such as options and strategy marketplaces to amplify capital efficiency were all raised by users; for institutions, the capital efficiency gains brought by tokenization are a core need. Second, the bubble is being cleared out, with projects beginning to de-tokenize—no longer relying solely on token issuance for marketing, but instead creating real value through payments, asset management, and brokerage services. Third, the industry is welcoming a clear regulatory framework, which will inevitably bring short-term pain, but in the long run, compliance and institutionalization will drive the industry to consolidate into mature financial infrastructure.
Odaily reports: A wallet linked to the $387.5 million Bitget exploit transferred 2,746 ZEC into Zcash's Ironwood privacy pool on Wednesday across three transactions, worth approximately $3.9 million.The funds account for roughly 15% of the ZEC stolen on September 24. The Ironwood privacy pool can conceal the sender, recipient, and transfer amount, but investigators may still be able to trace the path of funds returning to public addresses through transaction timing and amounts. (CoinDesk)
Odaily News: Cosine disclosed the interim investigation reports by SlowMist and Google Cloud's Mandiant on the Bitget hot wallet breach. Both reports indicate that the attackers first compromised systems related to third-party security products, then moved laterally into Bitget's wallet business environment.SlowMist's investigation revealed that one of the third-party security product nodes had a zero-day vulnerability, with related malicious activity traced back to as early as August 31. On September 25, the attackers also used an internal employee identity to access the management platform of another third-party security product and used highly customized withdrawal tools to interact with the wallet system's withdrawal logic. Mandiant stated that after gaining persistent access through third-party security devices, the attackers moved laterally to production wallet task servers and deployed malicious programs.Mandiant also stated that no evidence of Bitget private key leakage has been found so far, and cold wallets were not affected. Both security teams are continuing to investigate the specific intrusion paths the attackers took between the relevant systems.
Odaily reports: Bitget stated on X platform that an investigation by Google Cloud's Mandiant into Bitget's September 24 security incident found that attackers gained unauthorized access to certain third-party security devices, then laterally moved into Bitget's exchange wallet environment and obtained access to both warm and hot wallets. The investigation findings are consistent with the attack path previously disclosed by Bitget.
Odaily News — SlowMist security team has disclosed preliminary investigation findings on the September 25 theft of assets from Bitget's hot wallet. The investigation found that the attack involved certain third-party security products and wallet application hosts, with a zero-day vulnerability present in one of the third-party products. The attacker also gained unauthorized access to a third-party product management platform by impersonating an internal employee.SlowMist stated that the team has obtained the custom withdrawal tool used by the attacker to interact with the wallet system's withdrawal logic. On-chain attack activity began at 2:31 on September 25, lasted approximately 2 hours and 52 minutes, and involved multiple blockchains. The attacker subsequently attempted to tamper with withdrawal records and trigger additional BTC withdrawals. The team is still investigating how the attacker moved laterally between the affected systems.
Odaily News — Gracy Chen, CEO of cryptocurrency exchange Bitget, said the company is not optimistic about recovering the $388 million in crypto assets lost in last week's security incident. Citing the Bybit hack in 2025 as a reference, she noted that approximately one year after that incident, only about 3.5% of the stolen funds had been frozen, and that this does not equate to a completed recovery.Bitget has set up a bounty program offering 5% rewards for frozen funds and recovered funds respectively. The NEAR Intents team said it has intercepted over $50 million in assets related to the attack and frozen approximately $500,000. Tether and Circle have blacklisted the relevant wallets, freezing $318,000 worth of USDT and USDC.Gracy Chen stated that preliminary investigations indicate the attack may match VPN addresses used by North Korea-linked groups, but Bitget has not yet fully ruled out the possibility of an insider job. Bitget has resumed withdrawals in phases, starting with Bitcoin transactions on Monday and continuing with ETH transactions on Tuesday. (Cointelegraph)
Odaily News: According to Bitget monitoring, Mandiant and SlowMist are continuing to support the investigation and on-chain tracing of this incident. Bitget has published the identified attacker addresses and related tracing data to support industry collaboration and asset recovery efforts.Bitget expects to complete its internal security report this week and will release further updates once the investigation findings are verified. Bitget stated that the September 24 incident was the first such security event in its 8 years of exchange operations.
Bitget CEO Gracy Chen thanked Circle and Tether for their swift action. The Bitget Asset Recovery Bounty Program has now been launched, offering a 5% reward respectively to participants who assist in freezing the attacker's funds and recovering the assets, and calls on exchanges, security researchers, and on-chain investigators to participate.
Odaily News: Bitget posted on X platform that the vulnerability involved in the September 24 security incident has been identified and fixed. The team is conducting additional verification and security checks on the withdrawal infrastructure, with Mandiant and SlowMist continuing to assist with the investigation. The temporary suspension of withdrawals is a security measure and is unrelated to the availability of user assets; user account balances have not been affected, and the Bitget Protection Fund will cover the financial impact of this platform-wide incident.Bitget plans to resume withdrawals in phases: Bitcoin network withdrawals will resume on September 28 at 8:00 (UTC); ETH withdrawals on the Ethereum, BSC, Arbitrum, Base, and Optimism networks will resume on September 29 at 8:00 (UTC); USDT withdrawals on the Ethereum, BSC, Solana, and Tron networks will resume on September 30 at 8:00 (UTC); other tokens, fiat, and P2P withdrawals will resume on October 2 at 8:00 (UTC). Trading and deposit services continue to operate, and users do not need to take any action in advance.
Xie Jiayin, Head of Greater China at Bitget, announced the latest updates on the security incident, stating that the security team has accurately identified the hackers' attack vectors and methodologies, and obtained details on how the attackers bypassed security protocols. Tracing the attack back to its source is now highly imminent. Third-party security firms Mandiant and SlowMist are continuing their incident investigation and will release a detailed report subsequently. On-chain tracking confirms that approximately $387.5 million in assets were transferred to attacker addresses, an upward revision from the previously estimated $351.6 million. This adjustment simply incorporates ZEC and TRX into the total and does not indicate any new assets were stolen. No other unauthorized transfers have been detected. Bitget stated that all stolen funds at the platform level will be fully covered by the User Protection Fund, ensuring user assets remain unaffected. Bitget has also officially launched its Fund Recovery Bounty Program. Individuals or entities that voluntarily freeze or proactively retrieve attacker funds will be eligible for a 5% bounty, with prior assistance remaining eligible. The platform has published the attacker's addresses, a real-time fund tracking dashboard, and an information submission portal, and pledged to announce withdrawal times by 12:00 PM on September 26.
Bitget CEO Gracy Chen 发布安全事件最新进展称，平台正与独立第三方安全团队 Mandiant 和慢雾合作，对此次事件展开全面调查。 Gracy Chen 表示，目前用户账户余额保持完整，此次平台层面安全事件造成的影响将由 Bitget 用户保护基金覆盖；Bitget Wallet 采用自托管模式，其基础设施与 Bitget Exchange 相互独立，因此未受到此次事件影响。 目前 Bitget Exchange 的充值、交易及奖励等功能继续运行，但提币仍暂时暂停，平台正在进行额外安全核查，确认安全后将恢复。Bitget 官方公告也显示，提币服务目前仍处于暂停状态，充值和交易正常运行。 Bitget 表示，后续调查进展及安全事件相关信息将通过官方渠道持续公布。
Bitget CEO Gracy Chen posted a 12-hour progress report on the security incident on X, including:1. Affected assets include ETH, XRP (largest single-chain loss), BNB, AVAX, USDT, USDC, and other tokens. Affected chains include: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. All on-chain cold wallets have been confirmed secure and unaffected.2. All foundations of the affected chains have been contacted, and some foundations have confirmed the freezing of the hacker's wallet addresses.3. Based on IP behavioral characteristics and on-chain analysis, the attack methodology is highly consistent with known patterns of North Korean hacker groups. Relevant authorities have been notified, and full cooperation is being provided for a global investigation.4. Bitget Wallet (decentralized wallet) operates completely independently from Bitget exchange infrastructure, and this incident has no impact on it. Bitget Wallet assets are completely safe.5. Transparent disclosure regarding the platform's financial status: In addition to over $464 million in protection funds (all held in publicly verifiable wallet addresses), Bitget's own assets exceed $1 billion. User funds are covered at a 1:1 ratio, and all data can be verified on-chain.6. Regarding withdrawal recovery timing: The goal is to achieve full recovery as soon as possible. Once a specific time window is confirmed, an announcement will be made immediately. No commitment will be made to timelines that cannot be fulfilled.
Xie Jiayin stated that Bitget has sufficient user protection funds to cover the related losses, and withdrawals will be resumed immediately once all potential security risks are resolved, with the results to be published upon completion of the investigation.
Gracy Chen 称，目前确认相关损失已经完成，平台不存在进一步资金流失风险，黑客具体入侵手法仍在技术核查中，完整报告将在调查结束后发布。
Odaily news: Bitget spokesperson Xie Jiayin stated on X that the platform's security system detected abnormal transfers from some hot wallets at 2:31 a.m., and immediately activated its emergency response mechanism.According to Bitget's disclosure, the initial assessment indicates that the incident involves approximately $351.6 million. The platform said that cold wallets and the vast majority of assets were unaffected, user funds are safe, and the related losses are fully covered by the Bitget User Protection Fund, which currently exceeds $464 million.Bitget stated that within minutes of the incident, it activated an emergency response team and flagged and reported the addresses involved in the abnormal transfers. At the same time, for the sake of fund security, the platform has temporarily suspended withdrawals, which will be restored in an orderly manner after the security review is completed. Deposits and trading functions are currently still operating normally.The platform also said it has notified law enforcement agencies and on-chain security firms to intervene in the investigation.
Bitget exchange has responded to allegations of a $178 million security breach and withdrawal, stating that these rumors are unsubstantiated. The platform said it is cooperating with law enforcement agencies in the investigation and confirmed that user cold wallet funds remain secure.