Wikibit Crypto Risk Monitor — September 28, 2026
September 28 is primarily an execution-risk day. No newly verified exploit in the latest scan exceeds the security events already under active monitoring, but several exchange users are entering irreversible platform-controlled actions: Bitget is due to test the first phase of its post-hack withdrawal restoration; Kraken starts liquidating four migrated-token balances whose withdrawal windows have already closed; Bitvavo is converting residual KAVA, XNO and RVN to EUR; CoinEx is less than one day from ending spot trading and beginning disposal of non-USDT balances; and BitMEXs live support documentation now describes withdrawals as manual-web-only with USDT, USDC and ETH restricted to Ethereum. The most important security development remains Bitget. BTC withdrawals are scheduled to reopen at 08:00 UTC on September 28, later than this reports publication cutoff. The exchange says the wallet-backend vulnerability behind the September 24 breach has been remediated and that account balances are unaffected. The first successful BTC withdrawals will therefore be the first externally observable test of the recovery plan, rather than another statement of intent. At the same time, the attacker‘s assets continue moving. A detailed public chain reconstruction using Bitget’s published attacker addresses found the original stolen XRP had effectively been moved out of the large initial









