Bitget 更新：安全漏洞导致 3.88 亿美元资产受影响

Bitget updates security breach damage data: Total assets affected rise to US$387.5 million

Bitget updated its accounting of losses caused by last week's security breach, raising the amount linked to attacker control addresses to US$387.5 million from a previous estimate of US$352 million. The exchange's latest incident report released on Thursday and subsequent updates released on Friday stated that the incident remains manageable and no further unauthorized transfers are likely.

The exchange reiterated that it will continue to suspend withdrawal operations and said it has launched a reward program to assist in freezing or recovering affected assets. The key change in Bitget's latest disclosure is a "more complete accounting" of transfer records, which includes assets not covered in the original estimates.

Core Points

• Bitget updates vulnerability data: The amount transferred to the attacker's controlled address was US$387.5 million, instead of the previous US$352 million.
• Explanation of reasons for amendment: The exchange stated that the amendment reflects additional accounting of affected assets on the Zcash and TRON networks and does not indicate the existence of new unauthorized activities.
• Suspension of withdrawal and reward mechanism: The withdrawal function remains suspended, while Bitget has launched a reward program aimed at freezing or recovering funds.
• Multiple networks involved: Bitget reported that the incident involved multiple networks, including the EVM chain, XRPLedger, Zcash and TRON.

Adjustments made in incident reports

In the updated accounting, Bitget said the updated number stems from a more comprehensive reconciliation of transfers during the event. The exchange attributed the adjustment to affected assets on Zcash and TRON that were omitted from the original estimate and emphasized that the new numbers do not reflect further unauthorized transfers.

Bitget's statement emphasized the "controllability" of the incident: the company stated that the incident remained controllable and "no further unauthorized transfers were possible." For users who are concerned about this case, the practical significance is that this revision is mainly about the scope and accuracy of measurement, rather than evidence showing that the scope of disclosure has expanded.

Withdrawal continues to be suspended as attacker routes are traced online

In Friday's update, Bitget confirmed that it will continue to suspend withdrawal. At the same time, the platform said it had launched a reward program designed to inspire efforts to freeze or recover assets transferred to addresses controlled by attackers.

Bitget also uses online tracking to explain where funds are going. According to the exchange,"$387.5 million was diverted to attacker control addresses," and the updated total is about $35 million higher than earlier figures. In other words, the updated report is not just a restatement of loss estimates-it is an adjustment related to mapping these transfers to endpoints controlled by the attacker.

Networks and assets involved in the ecosystem

Bitget's latest incident report lists multiple affected blockchain environments. The exchange said the incident involved the Ethereum Virtual Machine (EVM) network address, as well as XRPLedger, Zcash and TRON.

后续披露还列举了据称被攻击者窃取或受影响的多种资产。根据 Bitget 的说法，被盗或受影响的资产包括 XRP、Ether (ETH)、Tether 的 USDt (USDT)、Zcash (ZEC)、USDC、USDT0、XAUt、BNB、AVAX 和 TRX。

对于投资者和交易者而言，事件的多网络性质至关重要，因为它会影响风险降低的速度。不同的链可能需要不同的监控、合规流程，以及—关键在于—交易所试图停止或限制提币并保护热钱包和中继托管时所需的不同操作步骤。

更广泛的行业背景与尚待澄清的问题

尽管对修正后的损失数字进行了澄清，但 Bitget 的安全漏洞仍然是行业内遭受的重大事件之一。背景信息指出，黑客在 2025 年 2 月从 Bybit 窃取了价值约 15 亿美元的 Ether，这凸显了即使提币被叫停且资金受到监控，主要交易所遭到破坏仍可能造成巨大损害。

值得注意的是，Bitget 随后的更新并未直接回应 CEO Gracy Chen 在周四发表的评论。在早期的报道中，Chen 推测可能是朝鲜黑客组织所为，并引用了她所谓的“IP 线索”。然而，如更新中所呈现的那样，修订后的事件报告侧重于核算和可控性，而非将漏洞归因于特定行为体。

This leaves readers with an important tension point: While the exchange's updated numbers are intended to resolve questions about size, attribution and motivation still appear to be independent and unaddressed in Bitget's latest public disclosure. As the reward program progresses and tracking efforts continue, more information may emerge-which may come from on-chain evidence, coordinating efforts to identify and freeze assets, or subsequent updates to exchanges.

For now, market participants should pay close attention to whether Bitget provides more details on the recovery effort, as well as a timetable for when the withdrawal may resume, and further revisions to the total affected. The updated numbers suggest there is a better understanding of the spread of the incident, but the path from attacker-controlled transfers to recoverable funds, and the question of who implemented the vulnerability, will likely determine the next stage of the story.