Bitget suspends service for select users through targeted process

In a statement published on the social network X on October 17, 2026, the exchange guaranteed that deposited capital remains secure and that its regular operations continue while the exit of selected clients is executed.

The company noted that the platform's general operations remain active without interruption for the rest of its clientele. Those who have not been explicitly contacted by the entity may continue to manage their portfolios normally. The measure is being communicated three weeks after the firm suffered a serious security incident in its technical infrastructure.

Notification and position liquidation procedure

The exchange specified that affected clients will receive direct notices via email, push notifications on mobile devices, and internal messages within the application itself. These alerts will detail the steps to follow, account closure schedules, and technical mechanisms provided to transfer balances to external wallets before the set deadlines.

The Bitget technical support team will assist holders in managing pending orders and processing withdrawal requests throughout the process. Additionally, the company enabled a specific link for users to individually verify their assets within the system.

The background of the September security breach

The measure coincides with the aftermath of the cyberattack detected in late September 2026. Cointelegraph reported on September 25, 2026, that Bitget had detected a series of unauthorized transfers in its custody structure, a situation that forced a temporary suspension of capital withdrawals while the scope of the incident was assessed.

A cybersecurity firm later quantified the economic impact of the breach at approximately $388 million stolen from the platform. The company has not publicly detailed the specific criteria applied for the selection of the affected accounts.

Alerts regarding potential fraud and identity theft

Bitget management issued a preventive warning to its community to exercise extreme caution against potential digital fraud attempts during the offboarding period. The entity urged users to verify the origin of every communication and to be wary of profiles attempting to impersonate support staff through unverified channels.

The warning emphasizes the importance of not entering credentials or signing transfers through suspicious external links that simulate the company's interface. All withdrawal and incident resolution procedures must be handled exclusively within the platform's official channels.

The immediate focus remains on the effective compliance with the withdrawal deadlines received by notified users and the development of the liquidation process announced by the company.