Bitget has provided a clearer picture of the security incident it announced on Thursday, confirming that about $388 million in assets were affected. That is roughly $35 million more than the figure initially reported, based on a later analysis of assets connected to Zcash and TRON. While the exchange may have already communicated with affected users, the updated number is important because it shows how complicated it can be to quantify losses in a crypto exchange breach, especially when funds move across multiple networks and asset types.
What the updated $388 million figure means
The revised estimate suggests that the original disclosure did not capture the full scope of the incident. The earlier number likely stood around $353 million, and the additional $35 million appears to have emerged after Bitget examined assets on Zcash and TRON more closely. That kind of adjustment is not unusual in a high-profile security event. Initial estimates are often based on the most visible movements, the fastest-available on-chain data, and the assets that are easiest to trace immediately after an incident.
As analysis continues, exchanges may identify additional affected wallets, delayed transfers, or assets that were not initially linked to the breach. In some cases, funds may be moved between networks, converted, or routed through third-party services before they are fully identified. That is why a number that looks definitive in the first few hours can shift over the following days.
Why the Zcash and TRON analysis matters
Zcash adds a privacy layer
Zcash is known for its privacy features, which can make tracking asset movements more difficult than on transparent public blockchains. When an exchange reports that a review of Zcash-related assets contributed to a higher loss estimate, it signals that some of the affected funds may have been harder to classify at first. Privacy-oriented chains do not automatically mean that funds are untraceable, but they can slow down the process of confirming exactly which assets were exposed and where they ended up.
TRON is a high-traffic network
TRON, or TRX, is one of the most active networks in the crypto ecosystem, especially for stablecoin transfers and high-volume transactions. Because so much activity moves through TRON, any breach review that touches that network can take time. Assets may appear, disappear, or change form as they pass through wallets, bridges, exchanges, or payment processors. Identifying the precise value affected requires more than simply looking at the first suspicious transfer.
Why exchange breach estimates often change
Unlike a bank account, where a breach can often be isolated to a specific database or internal system, a crypto exchange incident can involve many moving parts. The affected assets may span dozens of chains and token standards. Some may be easily traceable, while others may be partially obscured or moved quickly. Valuation also matters: the dollar value of the assets depends on prices at the time of the incident, the timing of the analysis, and whether the assets were stablecoins, major cryptocurrencies, or lower-liquidity tokens.
There is also the question of attribution. Not every wallet touched by a breach is necessarily controlled by an attacker. Some movements may involve custodial wallets, internal reserves, or partner addresses. The exchange may need to separate malicious outflows from ordinary operational activity before it can present a final figure. That process can lead to clarifications like the one Bitget issued.
What this means for users and the broader crypto market
For users, the updated figure adds another layer of concern about the risks of holding assets on a centralized exchange. Even when an exchange has insurance, custody controls, or a strong security team, a breach can still expose customer funds to risk. The incident also highlights why many users choose to keep a portion of their holdings in self-custody, use hardware wallets, or spread funds across multiple platforms rather than concentrating everything in one place.
For the broader market, the clarification is not necessarily about the size of the loss alone. It is also about transparency. Exchanges that provide detailed updates, explain how their estimates were calculated, and communicate about affected assets tend to build more trust than those that offer vague statements. In a sector where confidence can move quickly, clear disclosure matters.
Key questions still need answers
While the $388 million
Related read: OpenZeppelin Launches Audited Smart Contract Toolkit for TRON Developers
