# Bitget Reports Approximately $388 Million in Unauthorized Crypto Transfers By Simon Yoon Canonical URL: https://www.tokenpost.com/news/technology/30389 Published: 2026-10-12T14:36:07.000Z Updated: 2026-10-12T14:36:07.000Z Section: Technology > The September incident affected 12 wallet addresses. Other disclosures involved DCENT App Wallet transfers, MetaMask staking infrastructure and two bridge exploits. September’s crypto security incidents included approximately $388 million in unauthorized transfers at Bitget, wallet activity affecting some DCENT App Wallet users and exploits involving staking infrastructure and bridges. The events used different measures of exposure, including verified affected assets, unauthorized transfers, minted tokens and funds potentially at risk. Those figures do not support a single combined monthly loss total. Bitget’s verified affected amount was approximately $388 million across 12 wallet addresses. Unauthorized transfers began Sept. 24, 2026, at 2:31 p.m. ET (6:31 p.m. UTC) from parts of the exchange’s hot- and warm-wallet infrastructure. The incident involved a vulnerability in a third-party security product, high-level internal credentials and fraudulent withdrawal commands. Cold wallets and private keys were not affected. Bitget’s Protection Fund stood above $300 million as of Sept. 30 at 5 a.m. ET (9 a.m. UTC). Some DCENT App Wallet users experienced unauthorized transfers beginning Sept. 16, 2026. The technical analysis remained ongoing, and no final loss figure was provided. A separate infrastructure incident affected part of MetaMask’s staking operations between Sept. 30 and Oct. 1, 2026. There was no indication that MetaMask wallets or customer funds had been affected. The month also included two bridge exploits. The Meter Passport incident involved approximately $2.3 million in unbacked wrapped MTRG minted on BNB Chain. The Payy Network exploit involved approximately 1,832,149 USD Coin (USDC). The incidents highlight the difference between gross assets affected, confirmed losses, recovered funds and exposure that did not result in a final loss. Crypto-related hacks and exploits affected approximately $1.174 billion in assets during the third quarter, measured by the gross value involved when incidents occurred. [Earlier coverage of the third-quarter total]() did not establish a definitive net-loss figure. ## Links in this article - [Earlier coverage of the third-quarter total](https://www.tokenpost.com/news/technology/28872)