XRP
XRP accounted for the largest share of assets involved in Bitget’s reported security breach, with blockchain analytics firm Lookonchain identifying approximately 102.93 million XRP worth $157.48 million among the stolen funds.
Bitget disclosed the security incident on September 24, 2026, reporting unauthorized transfers totaling approximately $351.6 million. CEO Gracy Chen said the exchange detected abnormal activity at 18:31 UTC and immediately activated emergency response procedures, including a temporary suspension of withdrawals while the platform conducted a security review.
According to Lookonchain’s breakdown, the stolen assets included multiple cryptocurrencies and tokens across different networks. XRP represented approximately 44.1% of the itemized asset total, making it the largest single asset component identified in the breach.
The reported asset breakdown included 102,926,478 XRP valued at $157.48 million, 31,890 ETH worth approximately $85.75 million, $34.75 million in USDT, $21.06 million in USDC, $19.67 million in USDT0, 3,000 XAUt valued at $12.82 million, 12,719 BNB worth $9.88 million, 821,012 AVAX valued at $8.38 million, and 20.59 million TRX worth approximately $7.07 million.
The total value of the itemized assets reached approximately $356.86 million, which is about $5.26 million higher than Bitget’s initial reported loss estimate of $351.6 million. The reason for the difference was not explained in the initial disclosures.
Lookonchain also reported that the attacker converted a significant portion of stolen assets on Ethereum-compatible networks into 67,982 ETH, valued at approximately $183 million. The conversion figure relates to assets moved across compatible networks and does not confirm that the stolen XRP was exchanged into ETH.
Arkham’s tracking data grouped 22 addresses under its “Bitget Hacker” label, showing combined holdings of approximately $188.93 million at the time of its snapshot. The tracked assets included around 5,897 BNB worth $4.58 million and 495.625 wrapped ETH valued at $1.33 million, alongside the reported ETH holdings.
Bitget stated that customer funds remain protected through its User Protection Fund, which the exchange valued at more than $464 million. The company said the affected amount falls within the coverage of the fund and that customer balances remain secure while deposits and trading continue.
The exchange also said it identified suspicious transfer addresses, notified law enforcement agencies, and engaged blockchain security firms. Bitget has committed to releasing a full incident report covering the cause of the breach and corrective actions.
Market participants may continue monitoring asset movements linked to the attacker addresses, Bitget’s security investigation, recovery efforts, and whether additional details emerge regarding the mechanism behind the unauthorized transfers.
