Bitget, the cryptocurrency exchange hit by a roughly $388 million security breach in September, said it will discontinue services for a subset of users in what it calls a one-off exercise. The company announced the move in a post on X on Saturday and said user funds remain safe throughout the change while its platform keeps operating.

The exchange did not publicly specify how many accounts the exercise covers or which jurisdictions are affected. It framed the cutoff as a single, bounded action rather than the start of a broader retrenchment, though it has not detailed the criteria it used to select the affected users.

What happens to the affected users?

Users in scope will receive direct notifications by email, in-app messages or push notifications, according to Bitget's post. Those notices will spell out next steps, relevant deadlines and withdrawal arrangements. Anyone who has not received an official notification can continue using their account as usual, the exchange said.

Bitget also published a verification guide so customers can independently confirm their assets are intact, and said its customer support team will handle pending orders, withdrawals and other account questions throughout the process.

The exchange warned users to stick to official channels only, citing risks from phishing links, impersonation accounts and unverified information — a standard but pointed caution for a platform that just went through a major incident.

What's the connection to the September breach?

The service discontinuation follows a serious security event. On Sept. 25, Cointelegraph reported that Bitget had confirmed unauthorized transfers and temporarily suspended withdrawals while it investigated a breach. A security company later put the total stolen at approximately $388 million, making it one of the largest exchange compromises of the year.

Bitget has not publicly tied the two events together in its Saturday announcement. But the sequencing matters: an exchange offboarding a defined group of users weeks after a nine-figure breach raises operational questions about which accounts the platform can still service confidently, and how it is drawing lines between customer segments after the incident.

The withdrawal freeze from September has since lifted, and the exchange says trading continues for everyone outside the notified group. The affected users' path off the platform runs through deadlines Bitget will deliver in its direct notifications — not through a public schedule.

What should users watch now?

For Bitget customers, the practical test is whether they receive an official notice. If nothing arrives by email, in-app message or push notification, the account stays live and unchanged, per the exchange's own guidance. Users who do get notified should track the stated withdrawal deadlines and use only Bitget's official support channels, since post-breach periods reliably attract impersonators.

For the market, the open question is disclosure. A one-off offboarding exercise with no public numbers — no user count, no jurisdictions, no timeline — leaves observers reading the $388 million breach and this action side by side. Whether Bitget publishes more detail on the criteria and scope, or faces regulatory questions in the jurisdictions where affected users live, will shape how the market reads its operational resilience going forward.

By Daniel Okafor