Bitget is preparing to discontinue services for a selected group of users in a one-off move, adding a new layer of uncertainty for customers of the cryptocurrency exchange as the company faces heightened security scrutiny and growing pressure to comply with regulatory requirements across global markets. The Seychelles-headquartered platform announced the decision on Saturday, clarifying that the move does not represent a shutdown of the entire exchange and that affected users’ funds remain safe. The company said customers impacted by the change would receive notifications through email, in-app messages, or push alerts explaining the next steps, relevant deadlines, and available withdrawal procedures. Bitget has also directed users to an online resource where they can verify their assets, although the specific criteria behind the latest service restrictions have not been fully detailed.
The announcement comes just weeks after a reported security breach on September 24, 2026, that allegedly resulted in approximately $387.5 million in losses. The incident reportedly involved vulnerabilities in third-party security products, allowing attackers to gain access to exchange infrastructure and drain hot and warm wallets across 11 blockchain networks, including Ethereum and the XRP Ledger. Nearly 103 million XRP was reportedly taken during the attack. Initial access was said to have involved external vendor security appliances, after which the attackers allegedly obtained privileged access and used forged withdrawal commands to move assets. The incident raised questions about the security risks associated with third-party infrastructure and the safeguards exchanges use to protect customer funds.
Bitget responded by temporarily suspending withdrawals and launching a Recovery Bounty Program on September 25, offering a reward equivalent to 5% of funds directly frozen or recovered. The company also pledged to compensate affected users through its User Protection Fund, which reportedly held more than $464 million before the incident. Withdrawals were gradually restored from September 28 and were reported to be fully available again by October 2. However, publicly reported figures indicated that only around $840,000, or approximately 0.2% of the stolen assets, had been frozen by September 29, underscoring the challenges involved in recovering funds after a large-scale crypto exploit.
The latest service decision does not establish that the security incident caused the restrictions, and Bitget has not publicly provided enough detail to confirm the precise reasons for selecting the affected users. Nevertheless, the timing places the announcement against a backdrop of increased attention to exchange security, operational controls, and compliance obligations. Crypto platforms operating across multiple jurisdictions face growing expectations to identify customers appropriately, apply regional restrictions, and demonstrate that their systems can manage financial and cybersecurity risks. A targeted service change may reflect operational or regulatory requirements, but its significance will depend on the criteria Bitget ultimately provides and how clearly it communicates the impact to customers.
Market confidence remains another consideration. Bitget’s BGB token was reported to have fallen approximately 5.5%, declining from above $2 to around $1.89. Although the reported decline alone does not establish that the service announcement or security breach caused the move, uncertainty surrounding an exchange can influence sentiment toward its associated token and raise concerns among traders about platform exposure. The longer-term impact will depend on the company’s ability to clarify the latest restrictions, provide transparent updates about asset recovery, and demonstrate that its security measures have been strengthened.
For users who receive a notice, the immediate priority is to verify it through Bitget’s official application or website, carefully review the stated deadline, and confirm the available withdrawal options. Customers should avoid clicking unfamiliar links in unsolicited messages, never disclose passwords or private keys, and independently verify any request to move funds. Until the company provides more information about the scope and rationale of the service change, affected users should rely on direct official communications rather than speculation. The episode highlights a wider challenge for the cryptocurrency industry: exchanges must protect customer assets while navigating increasingly complex regulatory expectations, and clear communication becomes especially important when users are asked to take action involving their funds.
