Crypto commentator Xaif (@Xaif_Crypto) has shared a breakdown of the assets stolen from Bitget on September 24, and the numbers are striking.
The exchange lost $356.8 million across nine assets. XRP took the top spot, with hackers walking away with approximately 103 million tokens worth $157.5 million. XRP accounted for roughly 44% of the entire theft.
Xaif shared a full breakdown of the stolen assets from Lookonchain. ETH came in second at $85.7 million, followed by USDT at $34.7 million and USDC at $21 million.
XAUt, a tokenized gold asset, accounted for $12.8 million. BNB, AVAX, and TRX made up the remainder. XRP was not just the largest loss. It was larger than the next two assets combined.
Bitget got hit for $357M 💀
103M XRP stolen that's $157M in XRP alone, the BIGGEST chunk of the entire hack.
XRP holders, stay sharp. 🚨 https://t.co/av5vWWBi5V pic.twitter.com/xjJ5DLTMZe
— Xaif Crypto (@Xaif_Crypto) September 25, 2026
How the Attack Happened
Bitget CEO Gracy Chen confirmed the breach. Attackers exploited a vulnerability in the exchange’s backend system. They spoofed transaction data and manipulated Bitget’s authorization process into approving 19 unauthorized withdrawals from its hot and warm wallets.
The attackers did not steal Bitget’s private keys. Cold wallets remained secure. Bitget detected the unauthorized transfers at 18:31 UTC and activated emergency response protocols. The exchange temporarily suspended withdrawals while deposits and trading continued.
Bitget has enlisted Google-owned Mandiant and SlowMist to investigate. The exchange also contacted the foundations of all affected blockchains. Some confirmed freezing hacker wallet addresses, though XRP cannot be frozen at the protocol level. Bitget says its User Protection Fund holds over $464 million and covers the full loss.
XRP Users React
Xaif’s post drew responses. One commenter hoped Bitget reimburses affected users, noting they trusted the platform. Another community member offered a sharper take: “If you hold XRP on any exchange, this is your reminder that self-custody exists for a reason.”
We are on X, follow us to connect with us :- @TimesTabloid1
— TimesTabloid (@TimesTabloid1) June 15, 2025
Self-Custody Remains the Safest Option
That second comment reflects a principle the crypto community returns to after every major exchange hack. When assets sit on a centralized exchange, users do not control the private keys. A backend compromise, an inside job, or a sophisticated spoofing attack can move those funds without a user doing anything wrong.
Self-custody means holding assets in a cold wallet where only the user controls the private key. Hardware wallets offer an offline option that keeps funds out of reach of exchange-level attacks entirely. Bitget’s User Protection Fund may cover this loss. The next exchange that gets hit may not have one.
Disclaimer: This content is meant to inform and should not be considered financial advice. The views expressed in this article may include the author’s personal opinions and do not represent Times Tabloid’s opinion. Readers are advised to conduct thorough research before making any investment decisions. Any action taken by the reader is strictly at their own risk. Times Tabloid is not responsible for any financial losses.
Follow us on X, Facebook, Telegram, and Google News
