By Tom Whitfield

Bitget has been hit by a $350 million exploit, making it the largest cryptocurrency hack of 2026, according to a report aggregated by TradingView News. The figure, if confirmed by the exchange or on-chain forensics firms, would place the incident among the largest exchange breaches on record.

The report did not specify the date of the incident, the attack vector, or which wallets and chains were affected. Bitget had not published a confirmed incident report at the time of writing. The $350 million figure is the only verified data point in the initial report.

How large is $350 million in context?

An exploit of this size would rival the most damaging exchange hacks in the industry's history. By comparison, the 2025 attacks on Bybit, which lost roughly $1.5 billion to a wallet compromise attributed to North Korea's Lazarus Group, set the previous benchmark for a single-exchange breach. A $350 million loss would sit comfortably within the top tier of recorded incidents.

For Bitget, the operational consequences would be immediate regardless of the final accounting. Exchanges hit at this scale typically face withdrawal pauses, proof-of-reserves scrutiny, and accelerated requests from institutional clients for segregated custody arrangements. Recovery timelines in comparable cases have ranged from partial fund freezing by on-chain responders to permanent loss where the attackers laundered assets through mixers and cross-chain bridges.

What happens next?

Verification will come from three places: an official statement from Bitget, on-chain tracing by firms such as Chainalysis, TRM Labs or Elliptic, and any freeze requests routed to stablecoin issuers like Tether and Circle. Each of those channels has shaped the final loss figure in prior incidents, sometimes reducing the effective damage by tens of millions of dollars within days.

The regulatory dimension matters as well. Bitget operates internationally, and a breach of this reported size would typically trigger reviews in every jurisdiction where the exchange holds licenses or serves users. Whether customer funds are covered, and to what extent, depends on the exchange's own insurance arrangements — details Bitget has not yet disclosed in connection with this incident.

Why verification takes time

Initial loss figures in exchange exploits have historically moved in both directions. The Bybit figure held firm at approximately $1.5 billion; smaller incidents have sometimes been revised down after issuers froze stolen stablecoins or exchanges identified the breach as an internal error. Until Bitget confirms the number or an on-chain analysis firm publishes an attribution report, the $350 million estimate should be treated as reported but unconfirmed.

Market participants will watch for the exchange's first post-incident disclosure — typically within 72 hours in comparable cases — covering the attack vector, affected asset classes, and a customer reimbursement plan. The absence of such a disclosure would itself be a signal about the severity of the incident and the state of Bitget's internal controls.