Crypto exchange Bitget released an updated incident report on Thursday's security breach, clarifying that about $388 million in assets had been affected, not the $352 million initially reported.
In a Friday update, Bitget confirmed that "$387.5 million were transferred to attacker-controlled addresses" based on onchain tracing — roughly $35 million more than the company reported the day before. "The revised figure reflects a more complete accounting of transfers that occurred during the incident, adding affected assets on Zcash and TRON that were not included in the initial estimate," Bitget said. "It does not reflect further unauthorized transfers. The incident remains contained and no further unauthorized transfers are possible."
The exchange said withdrawals would continue to be paused following the breach and that it had launched a bounty program to incentivize the freezing or recovery of stolen assets.
According to Bitget, the compromised addresses spanned Ethereum Virtual Machine (EVM) networks, the XRP Ledger, Zcash and TRON. Among the assets stolen were XRP, Ether (ETH), Tether's USDt (USDT), Zcash (ZEC), USDC, USDT0, XAUt, BNB, AVAX and TRX.
The follow-up report did not address comments made by CEO Gracy Chen on Thursday speculating that a North Korean hacking group may have been behind the attack.
Even with the revised figure, Bitget's breach remains one of the largest to impact the crypto industry. Hackers stole approximately $1.5 billion worth of Ether from Bybit in February 2025.
