On the evening of September 24, 2026, approximately $388 million left the Bitget platform across 11 blockchains in less than three hours.

Each transaction was signed by Bitget itself.

In this video, we'll delve into the details. We'll explain how customer funds are protected on cryptocurrency exchanges: hot, warm, and cold wallets, the staking service, and the matching system. Then, we'll reconstruct the night minute by minute as recorded by the chain, extracting the technical evidence that revealed the thief didn't just impersonate a customer, but did something far worse.

We'll then go back to the real beginning: August 31, a third-party zero-day exploit, and the 25 days the attacker spent inside the systems before making their move.

Finally, we'll track the funds as they escaped freezing through bridges and exchanges until they dissolved into Bitcoin. We'll confront the suspect, along with a twist from February 2025 that completely changes the meaning of the story.

⏱️ Chapters
00:00 Introduction
02:58 The Vault: How Your Funds Are Safe on a Crypto Platform
11:34 Night Out: 2 Hours 52 Minutes
21:02 The Fingerprint: The Evidence Buried in Every Transaction
27:41 25 Days: The Door No One Expected
35:52 The Freeze Race: Where Did the Money Go?

46:32 The Suspect
54:32 Conclusion

🔗 Tornado Cash: أشهر أداة غسيل كريبتو على الانترنت || تورن...

⚠️ Warning: After every major breach, a wave of accounts impersonating platforms begins offering "compensation" or "refunds." Do not click on any links, and only share your data through official channels.

📚 Sources

▍ Official Data
Bitget — Official Timeline of Incident
https://www.bitget.com/academy/bitget...
Bitget — Refund Reward Program
https://www.bitget.com/support/articl...

▍ Criminal Investigation and Chain Trace
Sloofism — Investigation Report Progressive
https://github.com/slowmist/Knowledge...
Bitquery — Tracking Conversions on Chain
https://bitquery.io/investigations/bi...

Press Coverage
The Blog — Attacker Tested Risk Controls with Conversions Small
https://www.theblock.co/news/regulati...
Bitcoin.com/security — 25 Days Inside Systems Before the Theft
https://news.bitcoin.com/security/bit...
The Hacker News — A Vulnerability in a Security Product Third Party
https://thehackernews.com/2026/09/bit...
Coindesk — Spoofed Transfers, Not Stolen Keys
https://www.coindesk.com/markets/2026...
Coindesk — Recovery Opportunities The Funds

https://cointelegraph.com/news/bitget...

The case is still open. The official investigation has not yet been released, and we will add any significant updates here.

I am Almufattesh. The file is not closed yet.

#BitgetBreach #Cybersecurity #almufattesh #المفتش