Yesterday's US Bitcoin Spot ETF saw a net inflow of $517 million

Xie Jiayin, head of Bitget’s Chinese-language region, stated during the "Bitget Incident Review" live stream that attackers exploited a vulnerability in a third-party security product to steal internal network access credentials, forged withdrawal instructions for the wallet system, tricked the wallet into executing abnormal transfers that passed risk checks, and successfully completed the attack. The attackers did not use common viruses or malware; instead, they disguised their actions and covered their tracks by leveraging real identities and routine maintenance operations throughout, making this a relatively sophisticated targeted attack. Following the incident, Bitget has fully ruled out both the possibility of private key leaks and internal misconduct. The hackers exploited the third-party security product’s vulnerability to steal Bitget’s internal credentials and impersonated legitimate identities.

According to BIT (bit.com) market data, ahead of U.S. stock market opening, Nasdaq 100 futures fell 0.91%, Dow Jones futures dropped 0.21%, and S&P 500 futures declined 0.4%. Semiconductor, storage, and optical communication sectors, along with crypto-related stocks, all saw widespread declines. Semiconductor and storage stocks were broadly lower: Seagate Technology (STX) down 2.60%; Western Digital (WDC) down 2.52%; SanDisk (SNDK) down 3.35%; Micron Technology (MU) down 2.15%; NVIDIA (NVDA) down 0.81%; Intel (INTC) down 3.16%; Advanced Micro Devices (AMD) down 2.48%. Crypto-related stocks also fell: Strategy (MSTR) down 2.46%; Coinbase (COIN) down 2.05%; Circle (CRCL) down 3.27%; BitMine Immersion (BMNR) down 3.12%; SharpLink Gaming (SBET) down 2.39%. Optical communication stocks posted declines as well: Marvell Technology (MRVL) down 3.02%; AAOI (Applied Optoelectronics) down 2.61%; LITE (Lumentum Holdings) down 2.50%; COHR (Coherent Corp.) down 3.15%; CIEN (Ciena Corporation) down 1.93%; FN (Fabrinet) down 2.01%; AXTI (AXT Inc.) down 4.00%.

Xie Jiayin, Head of Bitget’s Chinese-speaking Region, said during the "Bitget Incident Review" live stream that the exchange has completed a full fix for the vulnerability and implemented the following rectification measures: First, isolate affected systems: relevant servers have been network-isolated to contain the attack spread, with evidence preserved for tracing. Second, reset internal credentials and tighten high-sensitivity permissions: all internal login credentials have been invalidated and reissued, the credentials stolen by attackers are now invalid, high-sensitivity permissions have been fully revoked and re-segmented, and critical operations require multi-person approval. Third, notify relevant third-party security vendors of the vulnerability details and assist in analysis and repair; relevant functions were suspended before the fix was completed. Fourth, all subsequent withdrawals will require independent verification. The incident was triggered by attackers exploiting a vulnerability in a third-party security product to steal Bitget’s internal network permission credentials and forge withdrawal instructions to the wallet system. Bitget immediately contacted the vendor, shared the incident details, and assisted in the repair. Currently, the incident is fully under control, no new unauthorized transfers have been detected, all affected systems are isolated, and all vulnerabilities have been patched. Each blockchain network will still need to pass multiple core verifications before resuming withdrawals.

On-chain analyst Ai Yi (Twitter handle @ai_9684xtpa) reported that following Bitget’s opening of its BTC withdrawal portal, the exchange’s total protection fund of 5,500 BTC has been flowing in batches into its hot wallet to facilitate withdrawals. As of now, 2,042.28 BTC (valued at roughly $169 million) has been transferred, with 3,457.72 BTC remaining on-chain. However, since these tokens were moved in advance, the analyst emphasized that this figure does not represent the actual amount of user withdrawals.

Xie Jiayin, head of Bitget’s Chinese-speaking region, stated during the "Bitget Event Review" live stream that in consideration of users’ actual needs, the platform will first open Bitcoin network withdrawals at 16:00 Beijing time today. By this Friday, Bitget will resume withdrawals for all assets across the platform. Withdrawal channels for regular users, KOLs, and VIP clients will open simultaneously, with no priority granted to any group. Per prior announcements, the specific withdrawal timelines are as follows: September 28 at 16:00: BTC (Bitcoin network); September 29 at 16:00: ETH (Ethereum, BSC, Arbitrum, Base, Optimism); September 30 at 16:00: USDT (Ethereum, BSC, Solana, Tron); October 2 at 16:00: other tokens, fiat currencies, and P2P services.

On-chain analyst Ai Yi (Twitter handle @ai_9684xtpa) has tracked that address casualpig.eth has re-established an ETH position after a one-year pause. The address’s last ETH purchase came when the token hit a peak of $4,751.74. Three hours ago, it withdrew 1,754 ETH from Bybit, valued at $4.65 million. The address’s prior ETH trading cycle ran from August to October 2025, during the last bull market peak. It chased the high at $4,751.74 and exited when prices fell to $4,433.10, incurring an estimated loss of $449,000.