Is Bitget Wallet safe to connect?
Self-custody wallet · Ethereum, EVM networks, TON, Bitcoin, 130+ blockchains (per its App Store listing). Checked 2026-10-27; every line links its source.
Worst case: Bitget Wallet is self-custody: anyone who gets your seed phrase or private key (for example through a fake APK, as in the 2022 hijacked 7.2.9 build that took about $8M) or gets you to sign a malicious approval can empty the wallet. Bitget's protection fund only covers losses caused by Bitget Wallet itself, not phishing or leaked phrases.
Safe setup in 3 steps
- Install only from web3.bitget.com/en/wallet-download: Chrome Web Store ID jiidiaalihmmhddjgbnbgdfflelocpak, Google Play com.bitkeep.wallet, or the App Store. If you must use an APK, check it first on Bitget Wallet's APK verification page, because fake APKs circulate.
- Write your seed phrase on paper, keep it offline and never share it or your private key with anyone. Check any account or link against web3.bitget.com/en/about/official-verification, and ignore DMs and unknown links in Discord and Telegram.
- Don't over-authorize DApps: approve only what you need and review old approvals with Bitget Wallet's 'Detect authorization' tool, as its safety page advises.
What it can do with your money
| Who holds the keys | You hold the keys Non-custodial: 'only you have access to your private keys and seed phrase.' The optional email, Google or Apple login has no seed phrase: Bitget Wallet says 'your keys are securely stored in the cloud' and protected with TEE hardware, and you get back in on a new device by logging in again. The Block reports this runs on AWS Nitro Enclaves. So for those wallets, access also depends on that login account and Bitget Wallet's service. Bitget Wallet advertises a protection fund ($300M headline; the same page's description says $700M) for losses 'caused by issues originating from the Bitget Wallet platform itself', claimed within 30 days; it does not cover your own mistakes (https://web3.bitget.com/en/about/safety-commitment). source |
|---|---|
| Can funds be sent out to any address? | Yes. You sign every send yourself, to any address. Bitget Wallet says your assets are not subject to third-party intervention. source |
Official links
- Website:
web3.bitget.com - Telegram:
@Bitget_Wallet - X:
@BitgetWallet - App:
https://chromewebstore.google.com/detail/bitget-wallet/jiidiaalihmmhddjgbnbgdfflelocpak - App:
https://play.google.com/store/apps/details?id=com.bitkeep.wallet
Where we confirmed these
Known fakes
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2026-08-24 | PCrisk flagged a fake 'Bitget Wallet BWB airdrop' on web3bitget.live and multiairdrop.org that runs a crypto drainer when you connect a wallet (third-party report; date is the page's 'updated' date). | PCrisk says the giveaway is fake and not linked to Bitget | source | |
| 2022-12-26 | BitKeep's Android APK 7.2.9 was hijacked and swapped for a malicious build that leaked private keys; OKLink said the attacker also ran fake BitKeep download sites. About $8M was stolen from 6,731 addresses. BitKeep said App Store and Google Play installs were not affected. | ~$8M (6,731 addresses) | BitKeep repaid from its own funds (50% by 2023-03-01) and said on 2023-03-29 it had 'fully compensated all the eligible users'. Users of that APK were told to move funds to a new wallet. | source |
| 2022-10-17 | BitKeep Swap exploit on BNB Chain: an attacker abused the swap router contract to pull tokens from users who had approved it. | ~$1M | BitKeep contained the attack and pledged to refund victims through a compensation portal; we did not find a final payout figure | source |