Gracy Chen @Bitget(@GracyBitget):Within 24 hours of the September 24 (UTC) incident: here is our further update as promised. Our investigation with Mandiant and SlowMist is ongoing — thorough forensic analysis takes more than 24 hours, and further findings will be shared as they become available. Three key updates below 👇 Revised figure: Onchain tracing has confirmed $387.5M transferred to attacker addresses — revised up from $351.6M. The higher figure reflects a more complete accounting of transfers during the incident, adding Zcash and TRON assets. To be clear: this is not additional theft. No further unauthorized transfers have occurred. The incident remains contained. Mandiant and SlowMist investigations are ongoing. Launched bounty program: Recovery Bounty Program is now live. 5% for voluntary freezing attacker funds, 5% for voluntary recovery. Freezes already secured count toward the bounty — thank you to every exchange, foundation and security team that moved quickly. We have published a real-time tracing dashboard, a submission portal, and the attacker's address API. You can also submit reports through Bybit's Lazarusbounty platform. Exchanges, security researchers, onchain investigators — we need you. Resuming withdrawals: We are currently working full steam ahead to prepare to resume withdrawals. The withdrawal plan will be announced by September 26th, 4:00AM UTC. To read more:

2026.09.25 14:11

Within 24 hours of the September 24 (UTC) incident: here is our further update as promised. Our investigation with Mandiant and SlowMist is ongoing — thorough forensic analysis takes more than 24 hours, and further findings will be shared as they become available. Three key updates below 👇 Revised figure: Onchain tracing has confirmed $387.5M transferred to attacker addresses — revised up from $351.6M. The higher figure reflects a more complete accounting of transfers during the incident, adding Zcash and TRON assets. To be clear: this is not additional theft. No further unauthorized transfers have occurred. The incident remains contained. Mandiant and SlowMist investigations are ongoing. Launched bounty program: Recovery Bounty Program is now live. 5% for voluntary freezing attacker funds, 5% for voluntary recovery. Freezes already secured count toward the bounty — thank you to every exchange, foundation and security team that moved quickly. We have published a real-time tracing dashboard, a submission portal, and the attacker's address API. You can also submit reports through Bybit's Lazarusbounty platform. Exchanges, security researchers, onchain investigators — we need you. Resuming withdrawals: We are currently working full steam ahead to prepare to resume withdrawals. The withdrawal plan will be announced by September 26th, 4:00AM UTC. To read more: