The most important part of the $387.5M Bitget breach isn't actually the size of the loss.
It's how the attackers got the money out.
Bitget says private keys were not compromised. Instead, attackers breached backend wallet infrastructure and manipulated transaction data so unauthorized transfers were approved by Bitget's own systems.
That is a very different failure mode from simply stealing a hot-wallet key.
Cold wallets remained unaffected, while the final loss increased from $351.6M to $387.5M after Zcash and TRON transfers from the original incident were identified.
Then there's the Protection Fund.
Bitget says its fund holds more than $464M and is sufficient to cover user losses. That's reassuring, but the structure matters: a large part of that protection is held in Bitcoin.
A BTC-denominated insurance reserve therefore has market risk precisely when confidence in a crypto exchange could be under pressure.
The bigger lesson isn't necessarily “CEX bad, self-custody good.”
Exchanges provide liquidity, fiat access and execution infrastructure that self-custody can't replace. But an exchange protection fund is still a backstop after something fails.
Self-custody removes exchange counterparty risk, while introducing responsibility for your own keys.
Different risks. Different trade-offs.
#CryptoSecurity #Bitcoin
It's how the attackers got the money out.
Bitget says private keys were not compromised. Instead, attackers breached backend wallet infrastructure and manipulated transaction data so unauthorized transfers were approved by Bitget's own systems.
That is a very different failure mode from simply stealing a hot-wallet key.
Cold wallets remained unaffected, while the final loss increased from $351.6M to $387.5M after Zcash and TRON transfers from the original incident were identified.
Then there's the Protection Fund.
Bitget says its fund holds more than $464M and is sufficient to cover user losses. That's reassuring, but the structure matters: a large part of that protection is held in Bitcoin.
A BTC-denominated insurance reserve therefore has market risk precisely when confidence in a crypto exchange could be under pressure.
The bigger lesson isn't necessarily “CEX bad, self-custody good.”
Exchanges provide liquidity, fiat access and execution infrastructure that self-custody can't replace. But an exchange protection fund is still a backstop after something fails.
Self-custody removes exchange counterparty risk, while introducing responsibility for your own keys.
Different risks. Different trade-offs.
#CryptoSecurity #Bitcoin