Gracy Chen @Bitget (@GracyBitget)

最新的进展同步一下：我们正在与独立第三方专家 @Mandiant 和 @SlowMist_Team 合作，对此次事件进行全面调查。 其他几点都是说过的，我再强调一下： -我们的首要任务是保障用户。用户余额保持完整，Bitget 用户保护基金将覆盖此次平台层面事件造成的影响。 -Bitget Wallet 为自托管钱包，运行于与 Bitget Exchange 完全分离且独立的基础设施之上，未受此次事件影响。 -Bitget Exchange 平台的充值交易奖励等功能都继续正常运行。在我们完成额外安全核查期间，提币功能暂时暂停；待我们确认可以安全恢复后，将尽快恢复提币。 -我们明白在此类事件发生时，用户希望尽快获得答复。我们将通过Bitget官方渠道及时发布最新进展。请关注我的和@bitget @xiejiayinBitget 的 X账号以及Bitget官方公告。

刚才上午跟大家做了个三个多小时的直播，这里总结一下直播中聊到的点： ① Bitget 安全事件12小时进展通报。以下为具体信息，不打官腔。 ② 受影响资产包括ETH、XRP（单链损失最大）、BNB、AVAX、USDT、USDC及其他代币。涉及链包括：以太坊、XRP账本、Arbitrum、Avalanche、Optimism、BSC、Base。所有链上冷钱包已确认安全，未受波及。 ③ 我们已联系所有受影响链的基金会，其中有基金会已确认冻结黑客钱包地址。我们正在全力跟进所有可行渠道，并将持续公布最新进展。 ④ 根据IP行为特征及链上分析，此次攻击手法与朝鲜黑客组织的已知模式高度一致。我们已上报相关机构，并全面配合开展全球调查。 ⑤ Bitget Wallet（去中心化钱包）与Bitget交易所基础设施完全独立运行，本次事件对其无任何影响。Bitget Wallet资产完全安全。 ⑥ 关于平台财务状况的透明说明：除逾4.64亿美元保护基金（均存放于可公开核查的钱包地址）外，Bitget自有资产超过10亿美元。用户资金以1:1比例覆盖，保护基金和用户资产数据均可链上核实。 ⑦ 关于提币恢复时间：我们的目标是尽快完成全面恢复。确认具体时间窗口后将第一时间公告。我们不会承诺无法兑现的时间节点。

Earlier 7 hours ago, I hosted a live stream with everyone that lasted over three hours. Here's a summary of the points I covered in the live: ① Bitget security incident update — 1 hours in. We're sharing specific facts, not just reassurances. ② Affected assets include ETH, XRP (the largest single chain loss), BNB, AVAX, USDT, USDC, and several other altcoin. The incident spans multiple chains: Ethereum, XRP Ledger, Arbitrum, Avalanche, Optimism, BSC, and Base. Cold wallets across all chains have been confirmed secure and unaffected. ③ We have contacted foundations across all affected chains. A few have already frozen the hacker's wallet addresses. We are actively pursuing every available avenue and will provide updates as the situation develops. ④ Based on IP behavioral patterns and on-chain signatures, this attack is consistent with techniques used by DPRK-linked hacker groups. We have notified relevant authorities and are cooperating fully with them globally. ⑤ Bitget Wallet operates on completely separate infrastructure from Bitget Exchange. It was not affected by this incident. Bitget Wallet's funds are fully safe. ⑥ To be transparent about our financial position: beyond the $464M+ Protection Fund — all held in publicly verifiable wallets — Bitget holds over $1 billion in its own assets. User funds are covered on a 1:1 basis. ⑦ Withdrawal restoration timeline: we are targeting a full resumption as soon as possible. We will announce the exact window as soon as it is confirmed. We will not commit to a timeline we cannot deliver.

Here is what we can confirm at this stage: On the attack: Our security team has made initial progress in tracing the source. The attacker compromised a critical backend system within our wallet infrastructure, used it to spoof transaction data, and triggered our authorization process to move funds out. Private key compromise has been ruled out — this excludes the more severe risk scenarios. Loss containment is confirmed. No further unauthorized transfers are possible. The specific method of system intrusion remains under active investigation. A full technical report will follow once confirmed. On withdrawal restoration: Multiple technical teams are working in parallel on system remediation and security hardening. Withdrawal restoration is being prepared in parallel. We will announce a timeline as soon as one is confirmed — we will not commit to a window we cannot guarantee.

关于攻击原因： 安全团队已初步定位攻击来源。黑客入侵了钱包服务的一个关键后台系统，并利用该系统伪造转账信息、调用授权签名流程，将资金转出。可以排除私钥泄漏的情况——这意味着更恶劣的风险场景已被排除。目前确认止损已完成，平台不存在进一步资金流失的风险。黑客具体入侵手法仍在技术核查中，完整报告将在调查结束后发布。 关于提币恢复： 多组技术团队正在并行推进系统修复与安全加固，提币恢复准备工作同步进行。我们将在有明确时间窗口后第一时间公告，不提前承诺无法兑现的时间。

确认 1.初步评估涉及金额约3.516亿美金 2.平台有三层钱包体系，确认当前全部冷钱包未受影响 3.用户资金安全。本次损失金额完全在Bitget用户保护基金覆盖范围之内，保护基金当前规模逾4.64亿美元 已采取的措施： 1.事件发生后数分钟内启动应急响应小组 2.异常转账地址已标记并上报 3.出于资金安全考虑，提币功能暂时关闭，待安全核查完成后有序恢复 4.已通知执法机构及链上安全机构介入调查 我将以小时级别持续同步事件最新进展，请关注本渠道及官方各平台。正在准备会开启一个直播，直面大家有的任何问题。

[SECURITY NOTICE] Bitget Hot Wallet Incident — September 24, 2026 At 18:31 UTC on September 24, 2026, Bitget's security systems detected unauthorized transfers from some of our hot wallets. Our security team activated emergency response protocols immediately. What we have confirmed: -Estimated funds affected: approximately $351.6 million -Cold wallets remain fully secure. Bitget operates a three-tier wallet architecture — the breach contained only a portion of the hot wallet and warm wallet layers. -User funds are safe. The full amount of this loss falls within the coverage of Bitget's User Protection Fund, which currently holds over $464 million Actions we have taken: -Emergency response team activated within minutes of detection -Abnormal transfer addresses identified, flagged, and reported -Withdrawals temporarily suspended as a precautionary measure, pending security review -Law enforcement and on-chain security firms have been formally notified and are engaged What this means for you: -Your account balances are accurate and your assets are protected -Deposits and trading remain fully operational Withdrawals are temporarily paused and will be restored as soon as the security review is complete -What comes next: We will provide updates on an hourly basis across this channel and all official platforms. A full incident report — including root cause analysis and corrective actions — will be published within 24 hours. We will not speculate on the attack vector until the investigation is complete. Bitget has navigated multiple market cycles. We will not run from this. Every dollar and every decision will be accounted for, transparently and in full. Updates will be posted here and across all official Bitget channels as they become available. — Gracy Chen, CEO, Bitget

Institutional clients are a core focus for Bitget's next phase, which means we're listening closely to what they actually need. Over the past few weeks, I've been sitting down with leaders from some of our key institutional partners for a new CEO Chat Series, where we talked about topics reshaping the market, from prime brokerage and fragmented liquidity to smarter collateral, tokenization at scale, and the changing expectations around institutional execution. Fire chat coming soon, stay tuned to @bitget

Over the past few months, the questions we’ve heard from institutional clients have increasingly focused on collateral efficiency, cross-asset risk, liquidity, and how tokenized equities can fit into existing portfolio strategies. So our institutional team has put our thinking into this rToken playbook for cross-asset capital management. For institutions exploring how crypto and tokenized equities can work together within one capital framework, this is for you 👇

Just 6 months ago, many market makers told me they didn't see enough retail demand for tokenized US stocks. But the conversation has changed. Now they're starting to enter as the market moves from narrative to real demand 👇

24/7 trading does not automatically mean 24/7 liquidity. The real challenge is keeping markets liquid when traditional exchanges are closed. That is why market makers, OTC liquidity and direct market connections matter. Our goal is not just round-the-clock access, but a smooth trading experience around the clock 👇

Two ways to access US stocks on @Bitget Stock 2.0: 1️⃣ Tokenized stocks for 24/7, stablecoin and on-chain access 2️⃣ Direct stock access for voting rights and shareholder ownership Different products for different users 👇

Spent some time at the @Bloomberg @crypto studio talking about what comes next for tokenized US stocks. I’ll be sharing a few clips on @Bitget Stock 2.0, 24/7 liquidity, market makers, and whether crypto exchanges could become the next generation of broker-dealers Stay tuned.

大家一直敲碗想问关于@RealityFi_xyz和rToken的问题，今天统一给大家解答 划几个重点： ✅ rToken是什么？是真实美股吗？ ✅ 有没有底层资产支撑和合规牌照？ ✅ 流动性、价差和交易费用如何？ ✅ 分红、拆股等权益怎么处理？ ✅ Reality后续还会怎么发展？ 还有别的疑问，欢迎在评论区留言～

大家不要无脑骂，等着买正是因为长线我看好比特币，我自己现在也有仓位，逻辑还是长远来看全球都在疯狂印钱，比特币、黄金、白银等commodity是该涨的； 但是短线叠加了CPI和通胀抬头可能会加息、美股超级IPO和AI板块疯狂吸血、microstrategy mtgox等巨鲸有可能会卖，大家看看比特币从8万跌下来真的是不带停的，但凡有点风吹草动从六万多到五万多是不是轻轻松松，做基金的朋友还觉得可能更低呢。 以上观点存粹是个人判断，不代表公司。 长期看好某资产，最合理的策略往往是： 分批建仓、定投、保留现金