GRACY CHEN PROMISED A FULL INCIDENT REPORT WITHIN 24 HOURS ON 2026-09-24 — MORE THAN 25 HOURS PAST THAT DEADLINE THERE IS NONE — AND BITGET’S OWN NOTICE PAGE NO LONGER CARRIES THE PROMISE

Read what the CEO of Bitget promised on 2026-09-24, three hours after her exchange noticed coins leaving its hot wallets. "We will provide updates on an hourly basis across this channel and all official platforms." Then the next sentence: a full incident report covering root cause analysis and corrective actions, "will be published within 24 hours."

The 24 hours ran out at 21:30 UTC on 2026-09-25. It is now more than 25 hours past that and there is no full incident report in Bitget's announcements. What there is instead is a Sept 25 update saying the attack path has been identified and the hole patched, alongside the sentence that the company "will not speculate on the attack vector until the investigation is complete." Identified but not disclosed. Those are different words and they are doing different work.

Now go and read the same security notice where Bitget itself publishes announcements. The hourly updates are gone. The 24-hour report is gone. "The full amount of this loss" has become "the loss relating to this platform-wide incident." "Law enforcement" has become "relevant authorities." The CEO's signature has become "Bitget Team." I cannot tell you when that page changed, or whether it ever read the other way. I can tell you the two documents do not say the same thing right now, and only one of them is the one that gets screenshotted.

This is the part custody actually turns on, and it has nothing to do with whether Bitget is good for the money. It probably is; the protection fund is bigger than the hole. It is that when you hold coins at an exchange, what you own is that company's account of what happened, revised at its convenience, on a page it controls. A promise with a clock on it is the rare piece of an exchange you can check. This one ran out. At the time of this writing, bitcoin was $83,433.