The hacker took $388 million on Sunday. Since then, your money has been doing the same thing.
Bitget recorded $463 million in net customer outflows in a single 24-hour window into Tuesday — the largest one-day net outflow in four years of reserve data, and more than 10% of everything the exchange still claims to hold. Customers are not waiting for an apology. They are voting with their coins, the only vote an exchange ever respects.
Here is what the exchange told you to believe. The protection fund will cover you. The fund they pointed to was $464 million when they needed it to sound like a safety net. It is now below $200 million. The money is not sitting in a vault. It is being spent — "to absorb the financial impact of the incident," in the words of their own CEO. The fund that was supposed to be your backup is being consumed by the theft it was created to cover. Read that again.
Their timeline, in their own words:
- The breach hit hot-wallet and warm-wallet infrastructure. A vulnerability in a third-party security product gave the attacker internal credentials.
- Fraudulent withdrawal commands bypassed existing risk controls. Not one. All of them.
- The exchange says no private keys or cold wallets were compromised. Convenient — that is the only part of the story that protects the exchange.
- Cybersecurity researchers linked the job to North Korea. The CEO said the indicators "should not be treated as a definitive attribution." Translation: everyone else has finished guessing, and she is still waiting to be sure.
- Withdrawals are coming back in pieces — Bitcoin on Monday, then Ether and USDT, the rest October 2. Bitget calls the staggered rollout a "security measure unrelated to the sufficiency or availability of user assets." The 10% of reserves that fled in a day calls it an exit.
You were told this was a technical incident. It is not a technical incident. It is an audit of whether an exchange can hold your money after someone else holds it first. The answer, at least for the people who moved fastest, is no.
The people still on the exchange are not early or late. They are last. And last is what everyone was when the withdrawals froze in 2022 — except this time the reserve numbers were public the entire time, and they were still going down.
What would you have needed to see before you trusted a company with your money after they told you a third-party vendor handed a hacker your withdrawal queue?
Love Is Bitcoin Takeaway: the protection fund is not a floor. It is the first number they get to spend, and your coins are second in line behind their own losses. If your keys are not in your hands, the only "security measure" that actually worked last week is the one you just performed.
Get the Bull Bitcoin hardware wallet with coupon code LOVEISBITCOIN — because the only withdrawal queue you will ever trust is the one no hacker can reach.
Not financial advice. Your coins, your keys, your only line of defense.
Sources:
Insurance Journal / Bloomberg — Crypto Hack Spurs $463 Million in Customer Outflows at Bitget
Related: Bitget begged THORChain to freeze the hacker’s coins
BITGET JUST WATCHED $463,000,000 FLEE IN 24 HOURS. THE FUND THAT WAS SUPPOSED TO REASSURE YOU HAS ALREADY HALVED.
