Bitget Loses $351.6 Million in Hot Wallet Breach, Rules Out Private Key Compromise

What happened

Attackers hijacked a backend wallet system to feed forged transfers into Bitget's own signing process, causing a $351.6 million loss. Bitget ruled out private key compromise and will cover the loss from a Bitcoin-denominated protection fund worth about $464 million.

Confirmed

Global impact / market context

This shows that an exchange's internal signing tools can be tricked into approving fake transfers even without stealing private keys, which means customer funds may be at risk. Bitget's protection fund, a reserve set aside for losses, will absorb the $351.6 million hit.

Analyst inference

For bitcoin holders and crypto investors, this breach highlights operational risks at exchanges beyond key theft, potentially reducing confidence in Bitget and similar platforms. The $464 million protection fund can cover the loss, but repeated incidents could drain such reserves and pressure bitcoin-related assets.

Analyst inference

What to watch

1. Bitget ruled out private key compromise, so focus on how the backend wallet system was hijacked and whether other exchanges use similarly vulnerable signing processes. Confirmed
2. Watch whether Bitget publishes details on the forged transfers, such as which assets and accounts were affected, to assess if customer funds or only the protection fund took the loss. Proposed
3. Monitor whether the $464 million protection fund shrinks from covering the $351.6 million loss, which could weaken Bitget's ability to absorb future breaches and affect bitcoin market confidence. Analyst inference

Affected assets

• BTC — Bitcoin

Evidence

• blockhead.co