YieldHow safe is Bitget Earn,
really?
Instead of a vague 'trusted' badge, we grade Bitget Earn on five concrete, checkable criteria — each with sources. Here's exactly how it scores.
Criterion by criterion, with sources
- ✓
Regulation
Dubai VASP license (VARA) since 2024. No EU MiCA license as of 2026 — MiCAR application filed with Austria’s FMA (June 2026), pending approval; EU clients cannot be legally served after 1 July 2026. Source 1 → Source 2 →
- ✓
Proof-of-Reserves
Publishes monthly Merkle-tree PoR since October 2022. Covers BTC, ETH, USDT, USDC. Source →
- ✓
Flexible withdrawal
Flexible Savings with no lock period. Fixed-term products are clearly locked. After the 24 September 2026 hack (see track record), withdrawals from the exchange were suspended and restored in phases between 28 September and 2 October; ADA, the last major coin still closed, had reopened by our 15 October check. The Earn terms themselves have not changed. Source 1 → Source 2 → Source 3 →
- ✓
Insurance Fund
User Protection Fund: over $464M before the 24 September 2026 hack, per Bitget (earlier reported at $600M+). It covered the loss of about $387.5M, and on 30 September Bitget said the fund had been refilled to $300M+, with its wallet addresses published for on-chain checks. Hot wallet protection, 95%+ cold storage. Source 1 → Source 2 → Source 3 →
- ✗
Track record (2+ years incident-free)
Operating since 2018. On 24 September 2026 at 18:31 UTC attackers moved about $387.5M (Bitget's figure of 25 September; first estimated at $351.6M) out of parts of Bitget's hot and warm wallets; cold wallets were not touched. Bitget says the loss is covered by its User Protection Fund (over $464M at the time) and account balances are intact. Withdrawals were suspended pending a security review and restored in phases — BTC on 28 September, ETH on 29 September, USDT on 30 September, the rest on 2 October; ADA, the last major coin still closed, had reopened by 15 October. Reports by SlowMist and Mandiant, published on 30 September, trace the breach to compromised third-party security products. Earlier, in April 2025, a bug in the VOXEL perpetual-futures market-making bot let eight accounts take ~$20M; Bitget rolled back the trades and compensated users from the same fund. Source 1 → Source 2 → Source 3 → Source 4 → Source 5 → Source 6 → Source 7 → Source 8 →
Incidents we count
Known incidents
2- September 2026 About $387.5M taken (first estimated at $351.6M) from parts of the hot and warm wallets on 24 September; cold wallets untouched. Bitget says its User Protection Fund covered the loss and was refilled to $300M+ by 30 September; SlowMist and Mandiant traced the breach to compromised third-party security products. Withdrawals came back in phases from 28 September to 2 October; ADA, the last major coin still closed on 3 October, had reopened by 15 October. Source →
- April 2025 A bug in the VOXEL perpetual-futures market-making bot let eight accounts take ~$20M; Bitget rolled back the trades and compensated users from its Protection Fund. Source →
Current earn rates on Bitget Earn
| Asset | Rate | Type |
|---|---|---|
| ICNT | 214 % | flexible |
| SAND | 73.1 % | flexible |
| GENIUS | 54.1 % | flexible |
| RSR | 39.6 % | flexible |
| AXL | 38.4 % | flexible |