0.84 ETH as the start, $350 million as the ending? #Bitget —A terrifying night, full timeline
At 2:31 a.m., a transfer of 0.84 ETH—like a small pebble.
After two and a half hours, it turned into a massive $350 million-sized hole.
That night, Bitget’s chain activity moved faster than its announcements.
I’ll go through the timeline step by step. The more I look, the more it feels like an assembly-line job:
⏱ 02:31:11｜Bitget hot wallet transfers 0.84 ETH to a brand-new address. The amount is small enough to be easily overlooked, but this is the opening signal.
⏱ 03:01:20｜From the same hot wallet to that address: 19.67 million USDT0.
⏱ 03:01:23｜About 12.85 million USDC is transferred out.
⏱ 03:01:35｜Another transfer of about 7130 ETH. By here, it’s no longer a one-off anomaly—it’s mass sweeping of wallets.
⏱ 03:01–03:07｜The hacker address exchanges all U into about 7111 ETH at a 5% premium. They’d rather pay the premium and switch quickly—the purpose is crystal clear: to run.
⏱ 03:00–04:00｜More flagged Bitget wallets continue transferring out ETH, USDT, USDC, AVAX, BNB, XAUT, and others to the same address. The cumulative amount rises to $183 million.
⏱ 03:57｜On-chain analyst @dcfgod posts an alert. The chain signals came first.
⏱ 04:13｜The hackers begin splitting the stolen ETH rapidly and moving it to multiple new addresses.
⏱ 05:30｜Bitget CEO Gracy Chen releases an English announcement confirming $351.6 million stolen.
The official statement says: Cold wallet security, and losses are covered by the $464 million user protection fund; all withdrawals are fully suspended.
Withdrawals have not resumed yet.
Most ironically: the official response comes at 05:30, but someone had already warned at 03:57 on-chain.
Now don’t rush to spread rumors, and don’t rush to buy the dip. First watch for withdrawal resumption; then watch for official follow-up.
Just information compilation—does not constitute investment advice.
At 2:31 a.m., a transfer of 0.84 ETH—like a small pebble.
After two and a half hours, it turned into a massive $350 million-sized hole.
That night, Bitget’s chain activity moved faster than its announcements.
I’ll go through the timeline step by step. The more I look, the more it feels like an assembly-line job:
⏱ 02:31:11｜Bitget hot wallet transfers 0.84 ETH to a brand-new address. The amount is small enough to be easily overlooked, but this is the opening signal.
⏱ 03:01:20｜From the same hot wallet to that address: 19.67 million USDT0.
⏱ 03:01:23｜About 12.85 million USDC is transferred out.
⏱ 03:01:35｜Another transfer of about 7130 ETH. By here, it’s no longer a one-off anomaly—it’s mass sweeping of wallets.
⏱ 03:01–03:07｜The hacker address exchanges all U into about 7111 ETH at a 5% premium. They’d rather pay the premium and switch quickly—the purpose is crystal clear: to run.
⏱ 03:00–04:00｜More flagged Bitget wallets continue transferring out ETH, USDT, USDC, AVAX, BNB, XAUT, and others to the same address. The cumulative amount rises to $183 million.
⏱ 03:57｜On-chain analyst @dcfgod posts an alert. The chain signals came first.
⏱ 04:13｜The hackers begin splitting the stolen ETH rapidly and moving it to multiple new addresses.
⏱ 05:30｜Bitget CEO Gracy Chen releases an English announcement confirming $351.6 million stolen.
The official statement says: Cold wallet security, and losses are covered by the $464 million user protection fund; all withdrawals are fully suspended.
Withdrawals have not resumed yet.
Most ironically: the official response comes at 05:30, but someone had already warned at 03:57 on-chain.
Now don’t rush to spread rumors, and don’t rush to buy the dip. First watch for withdrawal resumption; then watch for official follow-up.
Just information compilation—does not constitute investment advice.
