Bitget freezes XRP withdrawals as 27.63 million stolen tokens move

Bitget kept external XRP withdrawals disabled on Sept. 26 as Bitquery tracked stolen XRP moving onward. Bitquery recorded 27.63 million XRP moving from two tracked attacker accounts by 02:54 UTC on Sept. 26. Bitquery recorded 75.35 million XRP remaining across six tracked attacker accounts at that time. Bitget scheduled Oct. 2 at 08:00 UTC for the final phase of its withdrawal reopening. That phase covers other tokens, fiat and peer-to-peer services. XRP is not listed separately, so the schedule places XRP in the final group. Bitget's public XRP status showed deposits enabled at 12:11 UTC on Sept. 26. Bitget's first reopening phase starts with BTC on Sept. 28 at 08:00 UTC. ETH follows on Sept. 29. USDT follows on Sept. 30. Bitget said actual withdrawal availability will appear on its platform. The exchange said it identified and remedied the vulnerability involved in the Sept. 24 incident. Bitget said it was conducting further checks of its withdrawal infrastructure. Bitget described the pause as a security measure. Bitget said user balances were unaffected. Trading and deposits continue. Bitquery estimated that about 102.98 million XRP was taken from Bitget. Bitquery traced outgoing XRP through new accounts toward THORChain. Bitquery said most of the XRP flow it could follow was being swapped toward Bitcoin. That description does not necessarily cover all 27.63 million XRP that moved onward. The investigation cannot identify the owners of the final Bitcoin wallets. The transfers do not establish the amount of XRP sold through a centralized exchange order book. Bitget estimated the total value transferred to attacker-controlled addresses at about $387.5 million. Bitget previously estimated that value at $351.6 million. Bitget said the increase reflected additional Zcash and TRON assets in its accounting. Bitget said the increase did not reflect further unauthorized transfers. XRP traded near $1.55 on Sept. 26. The market data listed a Bitget XRP/USDT market.