Bitget temporarily suspended withdrawals pending security review
Bitget temporarily paused withdrawals as a precaution while reviewing the September 24 wallet security incident. A phased restoration plan was then announced, with BTC withdrawals confirmed open again on September 28 and broader restoration scheduled through October 2.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
Bitget confirmed unauthorized transfers from hot and warm wallet layers
Bitget said its security systems detected unauthorized transfers at 18:31 UTC affecting a limited portion of its hot and warm wallet infrastructure. The exchange later revised the affected amount from approximately USD 351.6 million to approximately USD 387.5 million after classifying additional affected assets on Zcash and TRON. Bitget later said attackers exploited a vulnerability in a third-party security product to steal intranet access credentials and forge withdrawal commands that bypassed risk verification; private keys were not compromised.
Status effect: limitedConfidence: highDirect event-linked evidence: 5
U.S. prosecutors reportedly opened Iran-sanctions compliance probe into Binance
Bloomberg reported, citing people familiar with the matter, that federal prosecutors were investigating whether Binance violated U.S. sanctions on Iran and whether it knowingly allowed prohibited trading on its platform. Reuters reported that a source confirmed the probe.
Status effect: activeConfidence: mediumDirect event-linked evidence: 2
IZAKA-YA announced service termination for Japan-targeted customers
IZAKA-YA announced that service would end for all customers residing in Japan regardless of nationality and for Japanese nationals living abroad. It said new registration and new lending would stop for the affected population, the Japanese-language site would close at the end of September, and the withdrawal procedure would remain available until asset-return handling was completed.
Status effect: limitedConfidence: highDirect event-linked evidence: 1
OFAC designated Iranian BitBank under E.O. 13902
The U.S. Treasury's Office of Foreign Assets Control added BITBANK, also identified as BITBANK3, to the Specially Designated Nationals List under Executive Order 13902. Treasury identified BitBank as an Iranian digital-assets exchange controlled by sanctioned financier Babak Zanjani and alleged that it formed part of a sanctions-evasion network and facilitated Bitcoin transfers to the Islamic Revolutionary Guard Corps.
Status effect: noneConfidence: highDirect event-linked evidence: 3
CoinEx announced an orderly wind-down
CoinEx announced that it would cease operations through a staged wind-down: new registrations and new non-spot subscriptions/orders stopped on September 15, non-spot services were scheduled to cease on September 22, spot trading and CoinEx Smart Chain / OneSwap on September 29, and the exchange platform after the withdrawal window on December 22, 2026.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
OneSwap announced discontinuation of all services
OneSwap announced that all services would discontinue at 02:00 UTC on September 29, 2026 in connection with the shutdown of CoinEx Smart Chain and the CoinEx exchange platform.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
WOO X acknowledged withdrawal-processing delays
After multiple users reported withdrawals remaining pending or processing for unusually long periods, WOO X said it was reviewing affected cases and system status and that some requests might remain under review or on-chain processing. The statement did not announce a platform-wide withdrawal suspension or identify a security breach or solvency issue.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
Japan FSA published warning concerning Izakaya Limited
Japan's Financial Services Agency published that it had issued a warning to Izakaya Limited concerning unregistered crypto-asset exchange business in Japan.
Status effect: limitedConfidence: highDirect event-linked evidence: 1
Thai SEC filed criminal complaint over Holdstation operations
Thailand's Securities and Exchange Commission filed a criminal complaint against three Holdstation developers and principal operators, alleging that the Holdstation application operated a fee-charging digital asset brokerage business without a license and solicited users through Thai-language services.
Status effect: noneConfidence: highDirect event-linked evidence: 1
CometDEX BLND-USDC pool was exploited on Stellar
The BLND-USDC Comet AMM pool used by Blend's backstop was exploited through an accounting flaw that allowed same-asset USDC-to-USDC swaps to corrupt reserve calculations. SlowMist records approximately 717,518.92 USDC in losses. The affected backstop was subsequently paused while recovery and remediation work proceeded.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
IZAKA-YA disclosed temporary transfer and withdrawal restrictions for some accounts
IZAKA-YA stated that suspected illicit-fund inflows or money-laundering signals had been identified in some transactions and that affected accounts were temporarily restricted from transfers and withdrawals while being investigated. The operator stated that this was not a uniform platform-wide halt and that ordinary transfers and withdrawals could also take longer during enhanced monitoring.
Status effect: limitedConfidence: highDirect event-linked evidence: 1
MANTRA Chain halt froze on-chain transactions
MANTRA Chain halted block production and froze endpoints and transactions while investigating a security incident later isolated to its Cosmos EVM module. MANTRA said two wallet addresses were affected, no user funds were exploited, and a patched release and coordinated restart were being prepared.
Status effect: limitedConfidence: highDirect event-linked evidence: 3
U.S. sanctions were imposed on Shelbit and its founder
Reuters reported that the U.S. Treasury sanctioned Shelbit, founder Siavash Kayvanpour and associated companies, alleging that Shelbit processed digital assets for Iran-linked sanctioned actors including the IRGC.
Status effect: noneConfidence: highDirect event-linked evidence: 1
BitradeX acknowledged withdrawal delays and account-specific restrictions
At the BitradeX Tokyo Summit, the CEO acknowledged that some users had experienced withdrawal delays and said certain accounts were subject to withdrawal restrictions while the platform reviewed them for abnormal trading behavior; BitradeX said trading and withdrawal services for the majority of users were operating normally.
Status effect: limitedConfidence: highDirect event-linked evidence: 1
Bitget announced the end of services for residents of Japan
Bitget announced that it would cease serving residents of Japan, stop new registrations after 2026-08-03, place affected accounts in close-only mode from 2026-11-01, and forcibly close remaining positions from 2026-12-31 while keeping withdrawals available.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
Boltz disabled all swap services until further notice
Boltz disabled all swap services after reporting a sustained increase in automated AI-assisted probing, several contained exploits, and internal security-scan findings that made a responsible restart untenable. Cooperative and non-cooperative refund paths and customer support remained available.
Status effect: inactiveConfidence: highDirect event-linked evidence: 2
BitradeX reported staged restoration of regional account functions
BitradeX said account functions in more than 10 countries and regions had returned to normal while accounts in some other countries and regions were still undergoing system adaptation and functional repair.
Status effect: limitedConfidence: highDirect event-linked evidence: 1
BitMart announced an orderly wind-down
BitMart announced phased restrictions beginning July 26, 2026, a stop to spot, futures, and other trading services on August 26, 2026, and planned termination of trading-platform operations on January 31, 2027.
Status effect: limitedConfidence: highDirect event-linked evidence: 1
Dango announced project wind-down
Dango announced that trading would halt on 29 July 2026 at 12:00 UTC and that the Dango Layer 1 network would stop on 13 August 2026 at 12:00 UTC.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
VARA fined Shelbit and ordered an immediate cease and desist
Dubai's Virtual Assets Regulatory Authority said Shelbit General Trading L.L.C had continued providing virtual-asset services without a valid licence, onboarding users without required KYC checks and marketing services without authorisation. VARA imposed financial penalties and directed the entity to cease all unlicensed virtual-asset activities in or from Dubai immediately.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
BitMEX announced exchange closure
BitMEX announced that exchange services will end on 23 September 2026 at 04:00 UTC. New account registrations stopped immediately, and reduce-only limits are scheduled from 26 August during the wind-down.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
Odos announced permanent service shutdown
The company operating Odos announced that the application would move to read-only mode on 27 July 2026 and that all company-operated services would shut down permanently on 30 July 2026.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
EU adopted transaction restrictions naming HTX
The European Union adopted its 21st Russia sanctions package and listed HTX (HUOBI GLOBAL SA) in Annex XIX Part A, with the transaction restriction taking effect on 2026-08-23.
Status effect: limitedConfidence: highDirect event-linked evidence: 2
EU adopted transaction restrictions naming EXMO
The European Union adopted its 21st Russia sanctions package and listed EXMO Ltd in Annex XIX Part A, with the transaction restriction taking effect on 2026-08-23.
Status effect: limitedConfidence: highDirect event-linked evidence: 2