Bitget's $350 Million Hot Wallet Breach: Crypto Market Update, 27 September 2026

By Jodez · Market Update · 2026-09-27

Bitget confirmed attackers drained more than $350 million from its hot wallets on September 24. Cold storage was untouched, and the exchange says its $464 million User Protection Fund covers the loss.

That second sentence is the one that matters. A nine-figure hot wallet breach where the insurance backstop exceeds the damage is a very different event from one where users are left holding the bag. On-chain trackers flagged roughly $183 million moved within about an hour of the first transfer, which tells you the attackers knew exactly which wallets to hit and in what order.

The tokens involved include AVAX, BNB, ETH, USDC, USDT, and XAUT. If stolen assets get liquidated on the open market, expect localized selling pressure in those pairs. The bigger question is whether Bitget users stay put or start rotating to other venues. Watch withdrawal status and on-chain movements over the next 48 hours. That is where the real signal lives.

A Legacy Approval Still Draining Wallets

Attackers exploited still-active approvals tied to Limit Break's payment processor across five chains, draining at least $2.8 million in NFTs and approved tokens. More than 23,000 NFTs valued above $5.7 million were moved into rescue custody.

Here is the part that should get your attention: the underlying contract reportedly cannot be paused. Users have to revoke vulnerable approvals manually. If you have ever interacted with Limit Break or Magic Eden on Ethereum, go check your approvals. This is not a drill for the people affected. It is a reminder for everyone else that old approvals are live ammunition.

The exploit hit after Magic Eden's Ethereum marketplace had already closed, which means the attack surface outlived the product it was built for. That is a pattern worth internalizing.

Housing and Jobs Beat, Yields Firm

Three macro prints landed in the window and all three came in hotter than forecast.

• Durable Goods Orders for August printed at 0.0% versus -0.3% expected, though down from July's 1.1%.

• New Home Sales for August hit 684K against a 615K forecast, up from 607K the prior month.

• Initial Jobless Claims came in at 197K, slightly better than the 201K estimate.

None of these are blowout numbers, but the direction is consistent. Firmer data reduces pressure on the Fed to cut, which nudges yields and the dollar higher. That is a mild headwind for crypto, not a regime change. The market absorbed it without much drama, which tells you positioning is not stretched in either direction.

SOL Leads a Quiet Major Board

Over the three-day window, most majors barely moved.

• BTC sits at $84,851, up 0.57%.

• ETH at $2,708, up 0.82%.

• SOL at $123.93, up 5.92%.

• BNB at $779.60, up 0.44%.

• XRP at $1.5376, up 0.23%.

• DOGE at $0.09785, up 2.17%.

SOL is the outlier. A near-6% move while BTC and ETH grind sideways tells you capital is rotating into higher-beta names, at least selectively. The scanner data backs that up. QNT was flagged 15 times on new longs, PHA 10 times, and SOON, WLD, ETHFI, RED, and BEAT each showed up six or seven times with bullish bias. US was the only name drawing new shorts, flagged nine times.

When the scanner leans this heavily bullish on alts while majors flatline, it usually means traders are hunting for relative strength. That works until it doesn't. Keep your sizing honest.

SEC Staff Opens a Door for Buybacks

SEC staff said on September 26 that announcing buybacks for a non-security token on a functioning network does not by itself establish the managerial efforts associated with a security. The guidance is nonbinding and unfinished networks may be treated differently, but it is the clearest signal yet that revenue-funded buyback structures have room to operate.

Pyth's existing and proposed buyback programs are the most direct beneficiary. The guidance does not resolve PYTH's legal classification, so do not confuse a staff view with a rule. Still, for any team thinking about token value accrual through buybacks, this removes a layer of legal uncertainty.

Separately, outgoing SEC Commissioner Hester Peirce called for replacing data-heavy KYC/AML practices with zero-knowledge proofs and attribute-based credentials. No adopted rule followed, and no specific token gets a near-term catalyst from the remarks. The longer-term implication for privacy-preserving identity infrastructure is real, but it depends on standards and integration that do not exist yet.

Ethena Extends USDe Into Equities

Ethena is adding Binance BSTocks, certificates linked to equities, paired with matching short equity perpetuals to extend USDe's funding-based collateral strategy. The constraint is depth: Binance books held only about $560,000 per side near mid-price, and annualized funding had fallen to roughly 7%. Deployment size was not disclosed.

LayerZero is facing a lawsuit from KelpDAO's parent company over a $292 million rsETH bridge loss. Evercrest alleges security risks were concealed and a single-verifier bridge design was approved. LayerZero disputes the claims. The immediate impact is reputational and could weigh on Stargate adoption and the revenue-linked ZRO buyback thesis.

Strategy proposed unchanged daily dividends across four preferred-share series with STRC issuance targeted above $100. Shareholders vote October 28. If STRC demand stabilizes, that reopens a preferred-equity funding channel for additional BTC purchases. The Fed also proposed capital rules for bank-issued stablecoins: full reserve backing plus 2% operational-risk capital on the first $20 billion of issuance, tapering to 1% above $50 billion. That framework could push banks toward distributing Circle's USDC rather than issuing their own coins.

Momentum Algo Tags AXS, Members Ride XPL

The Momentum Algo closed an AXS long at +2.66R. That is the kind of result that does not make headlines but keeps the lights on.

In member plays, lucifer_25 rode an XPL long for +282.8% at 5x leverage over 45 days. ahart666 caught KAS for +230.5% at 10x over two days and TAO for +138.3% at 10x over a similar window. Those are real closed trades from the community, shared after the fact. Nothing here is a signal to chase.

BTC leverage did flush during the window. The coin fell 4.1% intraday on September 25 as roughly $277.8 million of longs were liquidated across ten exchanges against $68.4 million of shorts. Binance BTC open interest dropped 7.7%, but longs were still paying shorts, which means leverage declined without fully clearing bullish positioning. That is worth keeping in mind.

What to Watch Next

Bitget withdrawal flows and on-chain movement of the stolen tokens top the list. If the exchange processes withdrawals normally and the stolen assets do not hit order books in size, the market will move on. If either breaks, expect a broader risk-off impulse.

Keep an eye on SOL's relative strength. If it holds while BTC chops, the rotation trade has legs. If it gives back the 5.92% move, the scanner's bullish alt bias will need rethinking. And watch the October 28 Strategy shareholder vote for any signal on preferred-equity demand.

This is market commentary, not financial advice. Always do your own research.