Skip to content
Bitget Hacker Moves $83 Million in Stolen XRP Amid Ongoing Investigation

Bitget Hacker Moves $83 Million in Stolen XRP Amid Ongoing Investigation

First seen 26 Sep 2026, 17:21 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 27, 2026 at 16:54 UTC
  • •The Bitget exchange suffered a $387.5 million breach, with $83 million in XRP moved by the hacker.
  • •Circle and Tether froze $320,000 in stablecoins, but most stolen funds in ether remain unfrozen.
  • •Bitget's protection fund will cover customer losses, with withdrawals resuming soon.

The hacker responsible for the Bitget exchange breach, totaling $387.5 million, has transferred $83 million in stolen XRP from three wallets, leaving approximately $75 million still in accounts that cannot be frozen due to XRP Ledger rules. While exchanges can restrict accounts receiving the stolen XRP, Ripple cannot block transactions from the attacker's wallets. Circle and Tether have frozen $320,000 in related stablecoins, but most of the stolen funds, primarily in ether, remain unfrozen. The breach was executed through a backend system compromise, with Bitget's CEO confirming no private key compromise occurred. The exchange's protection fund will cover customer losses, and withdrawals are set to resume from September 28 to October 2. XRP's market price has slightly declined, but the stolen amount represents a significant portion of the token's trading volume.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1d ago How this analysis works

Timeline

2026-09-25
Bitget hack occurs
Bitget exchange is breached, resulting in a loss of $351.6 million, primarily in ether.
Coindesk
2026-09-26
Hacker moves $83 million in XRP
The attacker transfers $83 million from three wallets, leaving $75 million in accounts that cannot be frozen.
Coindesk
2026-09-28
Withdrawals to resume
Bitget announces that withdrawals will resume in stages from September 28 through October 2.
Coindesk

More articles in this cluster (5)

Following this threat?

Track Bitget in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 2