What happened.

The latest reporting leaves two parts of the Bitget breach unresolved. [CryptoSlate](https://cryptoslate.com/bitget-freezes-xrp-withdrawals-as-27m-stolen-tokens-move) said XRP withdrawals were still disabled on Sept. 26. A Bitquery trace cited in the research record showed the stolen tokens moving onward, but did not measure a spot-market sale.

[Cointelegraph](https://cointelegraph.com/magazine/thorchain-under-fire-over-bitget-hack-eth-is-beyond-blockchain-now) reported that THORChain was under fire for refusing to blacklist addresses linked to the hack. The record does not say whether that position has changed.

Why it matters.

The withdrawal restriction remains in place in the latest reported status, while the traced XRP has continued to move. Those are separate observations: movement of stolen tokens does not establish where they will end up or whether they have been sold.

The THORChain dispute adds another question about the response to the breach: whether hack-linked addresses will remain unblocked. The supplied reporting records criticism and a reported refusal, but gives no later decision.

What to watch

Watch for a dated update showing Bitget re-enabling XRP withdrawals, a trace measuring a first spot-market sale, or a THORChain decision on the addresses.

Sources and limits

Upstream references and independent checks

Digest dated 2026-09-28 · upstream model sonnet. Direct links are matched to all 2 upstream source IDs.

  1. 1
    Bitget freezes XRP withdrawals as 27M stolen tokens moveDirect upstream source · 1365006fedd39d6937c37fe089f3147fa6abcbe2
  2. 2
    THORChain under fire over Bitget, ETH evolves beyond blockchain: Hodler’s DigestDirect upstream source · 8cd0a83af92170356274fcc6cbf7d49cdda896fa
Continue reading
  1. 1
  2. 2
  3. 3

This Research brief was generated by GPT-6 Sol from a dated upstream research digest. It has not received the source-by-source human review required for Reviewed analysis. Material limit: The supplied record summarizes a dated trace but provides no transaction-level data or direct THORChain statement; it cannot establish the XRP's final destination, prove that no sale occurred, or independently verify THORChain's position.