Bitget在遭遇约3.875亿美元黑客攻击后重新开放比特币提现
加密货币交易所Bitget于9月24日因遭受黑客攻击、导致约3.875亿美元资金转入攻击者控制的地址而暂停提现服务。目前,该交易所已宣布重新开放比特币网络上的比特币提现功能。
服务恢复时间表与事件概述
根据官方公告,比特币提现已于协调世界时(UTC)9月28日08:00恢复正常。这是在Bitget于9月24日暂停客户提现服务四天后的重大进展。交易所表示,此次漏洞利用涉及第三方安全产品,攻击者借此获取了凭证并伪造了提现指令。
Bitget确认,在9月的这起安全事件中,约有3.875亿美元的资金被转移至攻击者控制的地址。作为后续步骤,以太坊(ETH)提现预计将于9月29日恢复,全球范围内的USDT提现则定于9月30日恢复。
调查进展与安全加固
Mandiant和SlowMist两家安全公司正在协助进行调查,同时Bitget团队持续追踪并试图追回被盗资产。Bitget指出,与该事件相关的漏洞已被修复,且在采取遏制措施后,未再发现任何未经授权的转账行为。
公司强调,用户账户余额未受影响。在提现暂停期间,存款和交易服务仍在继续。Bitget表示,其“用户保护基金”将覆盖此次攻击造成的财务损失。
攻击细节与CEO回应
据Bitget披露,9月24日协调世界时18:31左右,未经授权的交易从其热钱包和温钱包基础设施的部分区域开始发生。最初估计受影响金额约为3.516亿美元,随后追踪数据显示转入攻击者地址的金额上升至约3.875亿美元。
在9月28日的直播活动中,首席执行官Gracy Chen指出,攻击者利用了第三方安全产品的漏洞,获取了高级内部网络凭证。这些凭证随后被用于创建绕过现有风控系统的欺诈性提现指令。“攻击者利用这些凭证向钱包系统发送欺诈性提现命令”,Bitget在其事件说明中写道。
公司补充称,没有私钥泄露,冷钱包也未受到影响。发布的事故时间线显示,攻击者入侵了后端钱包基础设施,并向授权流程输入了虚假的交易信息。
分阶段重启计划
比特币是首批恢复提现的资产。除了比特币网络外,币安智能链(BSC)网络上的BTC提现也已同步开放。以下是其他资产的服务恢复时间表:
- 以太坊(ETH): 9月29日08:00 UTC恢复,涵盖以太坊、BNB智能链、Arbitrum、Base和Optimism网络。
- USDT: 9月30日08:00 UTC恢复,涵盖以太坊、BNB智能链、Solana和Tron网络。
- 其他代币及法币服务:Including other token withdrawals, fiat withdrawal services and peer-to-peer (P2P) transactions, it is expected to resume at 08:00 UTC on October 2.
Bitget stated that each restart requires security checks of relevant assets and networks, so specific arrangements may be adjusted.
Stolen recovery efforts and fund tracking
With the gradual return of cash withdrawal services, the recovery work continues. Bitget has launched a reward program to reward behaviors that directly lead to the freezing or recovery of stolen assets. Eligible freezing and successful recovery will receive a reward of 5% respectively.
As of September 26, Circle and Tether have frozen approximately 99,990 USDC and 218,023 USDT related to the attack. Bitget released the attacker's addresses and opened a tracking portal that allows investigators to track the flow of funds across chains.
Some stolen assets continue to be transferred between different networks. Previous reports pointed out that funds related to the leak were routed through THORChain, causing controversy. Bitget has called for action against addresses associated with attackers, but THORChain said its protocol does not provide a mechanism to selectively block individual addresses.
Blockchain compliance company AMLBot subsequently traced approximately 4 bitcoins into the Wasabi CoinJoin transaction. The company said funds moved from the TRON network through USDT0 and Ethereum, and were subsequently converted to Bitcoin through THORChain.
In its September 25 estimate, AMLbot noted that approximately $343 million in funds related to the leak was dormant in the wallets of 13 attackers. These include eight Ethereum wallets holding approximately 68,300 ETH, four XRP addresses containing approximately 83 million XRPs, and one wallet holding nearly 18,900 ZECs.

Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC
ETH
XRP
ZEC