{"id":13779,"date":"2026-09-27T17:28:36","date_gmt":"2026-09-27T17:28:36","guid":{"rendered":"https:\/\/cryptonews.uk.com\/?p=13779"},"modified":"2026-09-27T17:28:36","modified_gmt":"2026-09-27T17:28:36","slug":"bitget-freezes-xrp-withdrawals-as-27m-stolen-tokens-move","status":"publish","type":"post","link":"https:\/\/cryptonews.uk.com\/?p=13779","title":{"rendered":"Bitget freezes XRP withdrawals as 27M stolen tokens move"},"content":{"rendered":"

<\/p>\n

\n

Bitget\u2019s XRP withdrawal route was still disabled on Sept. 26, even as the exchange set Oct. 2 at 08:00 UTC for the last phase of its post-breach withdrawal reopening. Its published timetable names BTC, ETH and USDT for earlier phases, then \u201cother tokens,\u201d fiat and peer-to-peer services for Oct. 2. XRP is not listed separately, so the schedule places it in that final group by exclusion. Bitget\u2019s public XRP coin status showed external XRP withdrawals disabled and deposits enabled at 12:11 UTC on Sept. 26.<\/p>\n

The timing matters to XRP holders because the stolen tokens are also moving. Bitquery measured 27.63 million XRP moving onward from two tracked attacker accounts by 02:54 UTC on Sept. 26, while 75.35 million remained in six tracked accounts. That is a dated account-balance snapshot, not a measure of XRP sold into the market. It leaves two different developments to watch: when customers can withdraw their XRP, and where the stolen XRP goes next.<\/p>\n

\n

Related Reading<\/span><\/p>\n

Bitget\u2019s North Korea-linked $352 million hack could drain 76% of its protection fund<\/h3>\n<\/p>\n

<\/span> <\/div>\n

Bitget\u2019s first scheduled withdrawal phase starts with BTC on the Bitcoin network on Sept. 28 at 08:00 UTC. ETH follows on Sept. 29 across the networks named in its notice, and USDT follows on Sept. 30. The Oct. 2 phase covers everything grouped under other tokens, along with fiat and peer-to-peer services. Each date is a planned start; Bitget says actual withdrawal availability will appear on its platform.<\/p>\n

The exchange said it had identified and remedied the vulnerability involved in the Sept. 24 incident and was carrying out further checks of its withdrawal infrastructure. It described the pause as a security measure and said user balances were unaffected. Trading and deposits continue, according to Bitget. Its public XRP status reflected that split on Sept. 26: the XRP network was open for deposits while external withdrawals were off.<\/p>\n

For a customer, the open trading venue and the closed XRP withdrawal route serve different purposes. A holder could change an XRP position on Bitget under the trading service the company says remains available. The API status showed that the same holder could not withdraw XRP to an outside XRP Ledger address at the time of the check. The Oct. 2 entry offers a timetable for that route; an enabled platform status and a functioning withdrawal will show whether it has opened.<\/p>\n

\n

Related Reading<\/span><\/p>\n

Swiss bank shields Bitget institutions while retail funds freeze<\/h3>\n<\/p>\n

<\/span> <\/div>\n

Where the stolen XRP has gone<\/h2>\n

Bitquery\u2019s transaction-backed investigation put the XRP taken from Bitget at about 102.98 million tokens. In its Sept. 26 snapshot, 27.63 million XRP had moved onward from two of the six attacker accounts it tracked. The other 75.35 million XRP remained across those six accounts at 02:54 UTC. The figures can change as funds move, and transfers out of an initial account do not identify who ultimately controls the destination.<\/p>\n