Cryptocurrency exchange Bitget has halted user withdrawals after suffering a $350 million exploit, a figure that ranks among the largest losses from a single security incident in the industry's history, oodaloop.com reported.

The exchange suspended withdrawal processing following the breach, leaving users unable to move funds off the platform while the company assesses the damage. Details about the attack vector, the specific chains or assets involved, and the timeline of the incident remain unconfirmed in the initial reporting.

How large is this exploit in historical terms?

A $350 million loss places the incident in the top tier of cryptocurrency heists. Only a handful of exploits — including the 2022 Ronin Network bridge attack attributed to North Korea's Lazarus Group and several large cross-chain bridge failures — have exceeded that figure. The scale of the loss raises immediate questions about Bitget's custody arrangements, its hot-wallet exposure, and whether customer funds or corporate assets account for the bulk of the stolen amount.

Withdrawal halts are a standard first-response measure for exchanges hit by exploits, but the duration of any freeze carries commercial consequences. Extended suspension typically triggers user outflows once withdrawals resume, regulatory scrutiny in the jurisdictions where the exchange operates, and pressure on the platform's reserve attestations.

What are the operational consequences for Bitget?

The immediate operational priorities for the exchange include:

• Confirming the scope of compromised wallets and freezing remaining exposed assets
• Coordinating with other exchanges and blockchain analytics firms to trace and blacklist stolen funds
• Communicating with users on whether losses will be covered by corporate reserves or insurance arrangements
• Engaging law enforcement, a step that in prior large-scale exploits has involved the FBI and, where state-sponsored actors are suspected, the Treasury Department's sanctions apparatus

Bitget, which operates internationally with a significant user base in Asia and emerging markets, has not yet detailed a compensation plan in the initial reporting. How quickly the exchange restores withdrawals — and whether it fully reimburses affected users — will shape its competitive position against rivals such as Binance and OKX, both of which have weathered security incidents with mixed reputational outcomes.

Why does this matter for the broader market?

Large exchange exploits consistently reignite debate over the custody model that centralized platforms rely on. Each incident strengthens the case advanced by self-custody advocates and, simultaneously, the argument from institutional investors that regulated, insured custodians with formal oversight are safer than offshore exchanges operating outside major regulatory perimeters.

The incident also lands at a moment of intensified enforcement attention. US agencies, including the Securities and Exchange Commission and the Commodity Futures Trading Commission, along with international regulators, have increasingly examined whether exchanges maintain adequate capital, security, and disclosure standards. A nine-figure loss at a major global platform will likely feature in that policy conversation.

Recovery precedents offer some context: in past exploits of comparable size, a portion of stolen funds has occasionally been frozen or returned through coordination with on-chain trackers, stablecoin issuers capable of blacklisting addresses, and law enforcement seizures. No such recovery has been confirmed in this case so far.

Bitget has not announced a target date for resuming withdrawals. The exchange's next disclosures — on the root cause, the asset split of the $350 million loss, and its reimbursement commitment — will determine whether the incident becomes a contained operational setback or a lasting blow to user confidence.