# Is Bitget safe? Check before you connect | TradingAgentStack

> Bitget: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-24.

Canonical: https://tradingagentstack.com/check/bitget/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Bitget

# Is Bitget safe to connect?

Exchange · Multi-asset centralized exchange (derivatives, spot). Checked 2026-10-24; every line links its source.

**Worst case:** Bitget holds your coins: in Sept 2026 a hack froze all withdrawals for 4-8 days, and recovery depended on Bitget's own protection fund; a leaked withdraw-enabled key works from any whitelisted IP.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Create bot keys with Trade (or Read-only) only and bind them to your server IP

2. Never enable Withdraw on a key you hand to a third-party bot or copy-trading tool

3. Keep only active trading balance on Bitget and withdraw the rest to your own wallet

Bitget also has a full listing with an Agent Risk Score [Agent risk 80% (partial, 6 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score): [Bitget on TradingAgentStack](https://tradingagentstack.com/tool/bitget/).

## What it can do with your money

| Who holds the keys | The exchange holds your funds Custodial; the Sept 2026 hack drained Bitget hot/warm wallets holding customer deposits. [source](https://dailycoin.com/bitget-351m-loss-2026-exchange-hack/) |
| --- | --- |
| Can funds be sent out to any address? | Yes. Withdrawals available; they were fully suspended 2026-09-24 and restored in phases 2026-09-28 to 2026-10-02 after the hack. [source](https://www.outlookmoney.com/invest/bitget-to-resume-withdrawals-in-phases-after-3875-million-security-incident) |
| What a leaked API key can do | Each UID can create 10 API keys, each read-only or read/write, with Read-only, Trade, Transfer and Withdraw permissions. 'You can only withdraw coins through a whitelisted IP address'; binding an IP is 'strongly recommended' for all keys. Key expiry is not stated. [source](https://www.bitget.com/docs/uta/rest-api) |
| Monero and Zcash | **XMR**: no spot market; XMR USDT-margined perpetual futures (status 'normal' in Bitget public API on 2026-10-24) **ZEC**: trade+deposit+withdraw (spot listed 2025-12-03; ZECUSDT spot 'online' in Bitget public API on 2026-10-24) [source](https://www.crypto-reporter.com/newsfeed/bitget-lists-zcash-zec-for-spot-trading-118558/) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `bitget.com`

Where we confirmed these
- https://www.coingecko.com/en/exchanges/bitget (exchange listing, partner link to bitget.com)

- https://www.bitget.com/docs/uta/rest-api (official API docs on bitget.com)

## Deadlines

- **2027-07-10**: EU AMLR (Regulation (EU) 2024/1624, Art. 79(1)) applies: crypto-asset service providers may not keep accounts that allow anonymisation or obfuscation of transactions, including through anonymity-enhancing coins (e.g. XMR, ZEC). Relevant if you use an EU/EEA-licensed entity of this service. [source](https://didit.me/blog/privacy-coins-no-kyc-swaps-rules-2026/)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2026-09-24 | Bitget hot/warm wallets drained after attackers used a third-party security product vulnerability to get internal credentials and send fraudulent withdrawal commands (ETH, XRP, BNB, AVAX, USDT, USDC, ZEC, TRX networks) | ~$387.5M (initially $351.6M) | All withdrawals suspended, then restored in phases 2026-09-28 to 2026-10-02; Bitget said its Protection Fund covers the loss and user balances were unaffected | [source](https://forklog.com/en/bitget-reveals-hack-cause-and-resumes-bitcoin-withdrawals/) |

## Check a link

Got a link, @handle or repo that claims to be Bitget? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Bitget

We email you if we add an incident, a freeze report, a known fake or a deadline for Bitget. Free; unsubscribe anytime.

## More checks: Exchanges
[Binance](https://tradingagentstack.com/check/binance/)[Bybit](https://tradingagentstack.com/check/bybit/)[OKX](https://tradingagentstack.com/check/okx/)[Kraken](https://tradingagentstack.com/check/kraken/)[Coinbase Advanced](https://tradingagentstack.com/check/coinbase-advanced/)[Hyperliquid](https://tradingagentstack.com/check/hyperliquid/)[Gemini](https://tradingagentstack.com/check/gemini/)[KuCoin](https://tradingagentstack.com/check/kucoin/)[MEXC](https://tradingagentstack.com/check/mexc/)[Gate](https://tradingagentstack.com/check/gate/)[HTX](https://tradingagentstack.com/check/htx/)[Crypto.com Exchange](https://tradingagentstack.com/check/crypto-com-exchange/)[BingX](https://tradingagentstack.com/check/bingx/)[Bitfinex](https://tradingagentstack.com/check/bitfinex/)[Bitvavo](https://tradingagentstack.com/check/bitvavo/)[Bitstamp](https://tradingagentstack.com/check/bitstamp/)[WhiteBIT](https://tradingagentstack.com/check/whitebit/)[Pionex](https://tradingagentstack.com/check/pionex/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)