🔓 Bitcoin hacks – Tuesday, 29 September 2026
**Bitget names the culprit: a vendor's flaw**
Bitget disclosed its $388 million breach stemmed from vulnerabilities in an unnamed third-party product, letting the attacker steal internal credentials and forge withdrawal commands past risk controls. CEO Gracy Chen says Mandiant and SlowMist are handling forensics and the vendor has been notified; ETH withdrawals reopened Tuesday as scheduled.
https://dailyhodl.com/2026/09/28/crypto-exchange-bitget-says-hacker-exploited-vulnerabilities-from-third-party-products-to-pull-off-last-weeks-388000000-exploit/
Previously:
🔓 Bitcoin hacks – Monday, 28 September 2026
**Bitget resumes withdrawals in stages**
Bitget began reopening withdrawals it suspended after the $387.5 million breach: Bitcoin from 08:00 UTC Monday, Ether Tuesday, USDT Wednesday, remaining assets and fiat October 2. The exchange says the exploited vulnerability is fixed, deposits and trading were unaffected throughout, and its $464 million protection fund covers the shortfall.
https://crypto.news/bitget-to-resume-withdrawals-in-stages-starting-sep-28/
Previously: View quoted note →
View quoted note →