Bitget users still can't withdraw XRP after a major hack sent over 27 million stolen tokens through attacker wallets. The exchange says withdrawals will reopen on October 2, but many holders are left waiting.
Bitget's XRP users are stuck. Withdrawals are still frozen after a security breach pushed more than 27 million stolen tokens through wallets controlled by attackers. The exchange is working to restore withdrawals, but both the fate of user funds and the stolen XRP are still up in the air.
Stolen XRP on the move
Independent onchain analysis found that XRP was the largest asset affected in the Bitget hack, with over 102.9 million XRP stolen, valued at approximately $157.5 million at the time.
Withdrawal timeline and user impact
Bitget says it will reopen XRP and other token withdrawals on October 2 at 08:00 UTC. Earlier, it restored withdrawals for BTC, ETH, and USDT. As of September 26, XRP withdrawals were still locked, but deposits and trading kept going. The exchange says it found and fixed the flaw behind the September 24 breach, and claims user balances are safe. Still, with withdrawals blocked, XRP holders can only trade inside Bitget. They can't move their coins to self-custody or other exchanges. Bitget's public status page shows the split: deposits are open, but withdrawals are not.
Bitget said it froze withdrawals as a security step after it spotted unauthorized transfers on September 24, 2026. Even as withdrawals stopped, deposits and trading stayed live. The company told users their funds were safe and promised to cover any losses from its own reserves. According to Reuters, Bitget's user protection fund held over $464 million, enough to cover the reported $351.6 million hack.
Tracing the attack and market impact
Bitquery tracked the stolen XRP as it moved into new wallets and toward THORChain, a cross-chain swap network. Most of the visible flow was swapped for Bitcoin. Still, Bitquery couldn't say who ended up with the funds. The transactions show XRP moving into other assets, but don't prove the tokens were sold on centralized exchanges or at what price. For market watchers, this matters. Wallet movements and cross-chain swaps don't always mean spot sales that could hit the price. Bitget's September 25 update put the total value sent to attacker wallets across all assets at about $387.5 million, with the XRP part at 102.98 million tokens.
Security response and industry context
Bitget's support updates confirm that withdrawals are being restored in phases, with BTC prioritized and XRP among the last to resume. The exchange maintains that user funds are safe and that the incident was limited to hot wallets, with cold storage unaffected.
This isn't the first time an exchange has kept withdrawals locked after a hack, even as trading continued. Similar cases were reported by EgonCoin. For Bitget, the real test comes on October 2. Will XRP withdrawals actually resume? Will the new security measures hold up?
On September 26, CryptoSlate showed XRP trading near $1.55, with Bitget's XRP/USDT market still active. This price gives a reference point, but doesn't prove the hack moved the market. The next things to watch are Bitget's withdrawal status as October 2 nears, and any changes in the tracked attacker wallets.
Centralized exchanges like Bitget keep user assets in pooled wallets. This makes them targets for attackers. When a breach happens, exchanges often freeze withdrawals to stop more losses and investigate. But this also means users lose access to their funds right away. It shows the risks of keeping assets on an exchange. Even after a fix, it can take days or weeks to get full access back. Stolen assets are rarely recovered. For users, it's important to weigh these risks when deciding where to store and trade digital assets.
