Crypto exchange Bitget has been hit by an exploit draining roughly $350 million, making it the largest crypto hack recorded in 2026, according to a report carried by TradingView's news aggregator.

The figure, if confirmed by on-chain forensics, would place the Bitget incident among the most damaging exchange breaches of the current cycle. It exceeds the scale of several high-profile 2025 compromises and renews pressure on centralized trading venues to demonstrate that custody architecture, withdrawal controls and internal risk limits have kept pace with the growth in assets under management.

Bitget has not yet published a full technical post-mortem, and the precise attack vector — whether a compromised signing key, a flaw in hot-wallet infrastructure, a third-party vendor compromise or an insider action — remains unverified at the time of writing. The $350 million attribution currently rests on aggregated reporting rather than a confirmed blockchain analysis from firms such as Chainalysis, TRM Labs or Elliptic. Attribution of this magnitude typically takes days, sometimes weeks, as investigators trace fund flows across chains, bridges and mixing services.

The operational consequences for Bitget are immediate regardless of the final forensic accounting. Exchanges hit at this scale face withdrawal backlogs, a surge in customer-service load and heightened scrutiny from institutional counterparties that route liquidity through the venue. Market makers and arbitrage desks routinely reassess or temporarily pause exposure to a compromised platform until the operator publishes evidence that remaining cold-storage reserves are intact and segregated.

The incident also carries regulatory weight. Bitget operates internationally with a substantial retail base, and a $350 million loss will trigger reporting obligations in the jurisdictions where the exchange is licensed or serves customers. Authorities in major crypto hubs have shown an increasing willingness to demand incident disclosure within tight windows, and exchanges that lag on transparency risk enforcement follow-on even when the hack itself originates externally. Whether Bitget can absorb the loss from its own reserves, insurance coverage or a combination of both will shape its solvency posture in the weeks ahead.

For the broader market structure, the hack revives the central critique of centralized custody: a single point of failure can void years of compliance investment in one transaction. It also puts fresh attention on proof-of-reserves implementations, which grew common after the 2022 collapse of FTX but vary widely in rigor. Merkle-tree attestations published monthly say little about hot-wallet key management at the moment an attacker strikes.

The timing is unfavorable for the sector. Crypto hacks and exploits have trended upward in scale across successive years, with 2025 setting records for total value stolen, and a nine-figure breach of a top-tier exchange in 2026 suggests the curve has not bent. Security firms have repeatedly warned that attacker sophistication — particularly among groups linked to North Korea's Lazarus and associated outfits — has outpaced the defensive posture of many mid-sized and large venues.

Investors and counterparties will now watch for three concrete signals: a verified on-chain accounting of the stolen funds, a public statement from Bitget quantifying the impact on its reserve ratio, and any regulatory acknowledgment from authorities in jurisdictions where the exchange is registered. Each of those disclosures will determine whether the incident remains a contained exchange failure or hardens into a broader test of confidence in centralized crypto custody this year.