Wikibit Crypto Risk Monitor — September 29, 2026

Lời nói đầu:WikiBit tracks CoinEx’s Sep. 29 spot shutdown and non-USDT disposal, Bitget’s confirmed BTC withdrawal restart, a U.S. Senate PSI report on Iran-linked USDT, California’s new crypto laws, and Binance’s Funding Account restructuring.

September 29 is defined by one immediate centralized-exchange deadline and two material regulatory developments.

CoinEx reaches its 02:00 UTC spot-shutdown and non-USDT asset-processing cutoff today. At the publication cutoff for this report, that deadline is still ahead. Under the exchanges wind-down terms, all spot trading ends, open spot orders are cancelled, remaining CET is repurchased at 0.005 USDT per CET, CoinEx Smart Chain and OneSwap cease operations, and remaining non-USDT balances begin platform-controlled disposal. For users who want a non-USDT asset in its original token form, this is the critical deadline; the later December 22 general withdrawal deadline does not guarantee every original token remains supported unchanged.

Read the updated Detail: CoinEx Shutdown

Bitget has passed its first post-hack withdrawal milestone. The exchange confirms BTC withdrawals resumed at 08:00 UTC on September 28 on both the Bitcoin and BSC networks. This is the first externally verifiable operational recovery step following the approximately $388 million September 24 wallet-infrastructure breach. ETH withdrawals are scheduled for September 29 at 08:00 UTC, later than this reports publication cutoff; USDT follows September 30 and other assets/fiat/P2P October 2.

Bitgets updated incident explanation also sharpens the attack path: the attacker may have exploited a vulnerability in a third-party security product to obtain high-level internal credentials, then issued fraudulent withdrawal commands that bypassed existing risk controls. Bitget says private keys and cold wallets were not compromised, the vulnerability has been remediated and no further unauthorized transfers have been identified after containment.

Read the updated Detail: Bitget Wallet Backend Hack

The largest new regulatory-risk story is Tether and Iran-linked USDT. Democratic staff of the U.S. Senate Permanent Subcommittee on Investigations released a report on September 28 after analyzing 846 wallets sanctioned or targeted for seizure because of links to Iran and regional proxies. The report says 84% transacted exclusively or nearly exclusively in USDT and argues Tether had not consistently frozen illicit wallets quickly enough. Senator Richard Blumenthal referred the findings to Treasury and the Justice Department and requested investigations into possible sanctions and banking-law violations.

This is not an enforcement finding that Tether violated U.S. law. Tether responded the same day with its own enforcement record, saying actions involving USDT supported approximately $550 million of Iran-linked asset freezes in 2026, including more than $344 million in April and more than $130 million in July. The company says it works with more than 340 law-enforcement agencies in 67 countries and has helped freeze more than $4.9 billion globally. The central risk is therefore not a USDT depeg or reserve event; it is escalating sanctions/AML scrutiny of stablecoin issuer controls.

Read the Detail: Tether Iran Sanctions Scrutiny

California also added two material crypto statutes. AB 2409 bars covered California public officers and certain public employees from issuing meme coins and restricts digital-asset service providers from offering specified official-linked meme coins to California residents when issued on or after January 1, 2027. SB 1208 expands California money-laundering law to digital assets and creates a warrant-based seizure/forfeiture process for qualifying digital assets, with victim-distribution procedures and a statutory sunset for the digital-asset provisions on January 1, 2032.

These laws are narrower than headlines suggesting “California banned meme coins.” Private meme coins generally are not prohibited by AB 2409; the law focuses on issuance by covered officials/employees and certain official-linked listings to California residents.

Read the Detail: California Meme Coin and Digital-Asset Seizure Laws

Finally, Binance begins a major Funding Account restructuring today. Starting September 29, Funding Accounts stop accepting on-chain deposits. The platform begins routing most ordinary crypto activity toward Spot Accounts and enables a one-click migration path for unsupported Funding Account assets. The account will eventually become a Stocks Account used for U.S. stocks and stock-options settlement, with six settlement assets retained for that purpose: USD, USDC, USDT, USD1, U and BNB. Binance says users total asset value is unchanged and remaining non-stock crypto will ultimately be migrated to Spot; automatic batch migration for balances not proactively moved is expected as the transition completes toward January 2027.

This is not an asset-loss event, but API users, P2P users, card/gift-card users and users sending deposits to old Funding Account routes need to update workflows.

Read the Detail: Binance Funding Account Migration

Tomorrow creates another dense regulatory and operational cluster. The UK FCA crypto authorisation gateway opens September 30; ASICs sector-wide digital-asset no-action position expires September 30; Router Protocol targets full shutdown; Bitget plans USDT withdrawal restoration; Binance will pause Base-network deposits/withdrawals from 17:00 UTC ahead of the Base Cobalt upgrade at 18:00 UTC.

① Todays Highest-Priority Alerts

CoinEx

  • Risk:Critical
  • Event: Spot shutdown / non-USDT disposal
  • Time: Sep. 29 02:00 UTC
  • Latest Status: Deadline later today; spot ends, CET auto-repurchase, CSC/OneSwap cease, non-USDT disposal begins
  • Evidence Type: Official wind-down terms / Media cross-check
  • Continue Monitoring:Yes
  • New vs Previous Day:Irreversible shutdown milestone today

Bitget

  • Risk:Critical
  • Event: Post-hack withdrawal restoration
  • Time: Sep. 28–Oct. 2
  • Latest Status: BTC withdrawals confirmed open on Bitcoin+BSC; ETH scheduled Sep. 29 08:00 UTC; investigation/recovery ongoing
  • Evidence Type: Official + On-chain
  • Continue Monitoring:Yes
  • New vs Previous Day:BTC recovery milestone confirmed

Tether / U.S. Senate PSI

  • Risk:High / Developing
  • Event: Iran-linked USDT sanctions scrutiny
  • Time: Sep. 28
  • Latest Status: PSI Democratic staff says 84% of 846 studied wallets used USDT almost exclusively; Blumenthal requests Treasury/DOJ investigations; Tether cites ~$550M Iran-linked freezes
  • Evidence Type: Official Senate + Company
  • Continue Monitoring:Yes
  • New vs Previous Day:New sanctions/AML investigation pressure

California

  • Risk:Medium / High
  • Event: AB 2409 + SB 1208 signed
  • Time: Sep. 27–28
  • Latest Status: Public-official meme-coin restrictions and digital-asset money-laundering/seizure framework enacted
  • Evidence Type: Official state announcement + bill text
  • Continue Monitoring:Yes
  • New vs Previous Day:New state crypto laws

Binance

  • Risk:Medium
  • Event: Funding Account → Spot migration
  • Time: Starts Sep. 29
  • Latest Status: Funding Account on-chain deposits stop; one-click migration begins; future Stocks Account structure announced
  • Evidence Type: Official
  • Continue Monitoring:Yes
  • New vs Previous Day:Account-routing transition begins today

Meter.io

  • Risk:Critical
  • Event: Block-validation exploit
  • Time: Ongoing
  • Latest Status: Latest verified state still lacks final restart/recovery accounting
  • Evidence Type: Project + Security
  • Continue Monitoring:Yes
  • New vs Previous Day: No material verified update

Duelbits

  • Risk:High
  • Event: Hot-wallet incident / outage recovery
  • Time: Ongoing
  • Latest Status: Final root cause and independently verified full withdrawal restoration remain unresolved
  • Evidence Type: Project + On-chain
  • Continue Monitoring:Yes
  • New vs Previous Day: No material verified update

Limit Break / Magic Eden

  • Risk:High
  • Event: Legacy approval exploit
  • Time: Ongoing
  • Latest Status: Recovery flow active; unrevoked approvals remain risky; final stolen/recovered accounting still developing
  • Evidence Type: Security + Project
  • Continue Monitoring:Yes
  • New vs Previous Day: No material verified update

② Exchange Exit / Shutdown / Withdrawal Risk

CoinEx — Critical

The decisive deadline is September 29 at 02:00 UTC.

Until then, users can still make the final self-directed decisions allowed by the wind-down. After the cutoff, CoinEx controls execution for many balances.

The main changes are:

  • spot trading ends;
  • open spot orders are cancelled;
  • remaining CET is repurchased at 0.005 USDT per CET;
  • CSC and OneSwap cease;
  • externally liquid non-USDT balances may be sold and credited as USDT;
  • illiquid assets can lose continuing wallet/custody support.

The December 22 general withdrawal window remains relevant, but it must not be described as an original-token guarantee.

Bitget — Critical, improving

BTC withdrawals are now confirmed open on:

  • Bitcoin;
  • BSC.

ETH is scheduled to reopen at 08:00 UTC today across Ethereum, BSC, Arbitrum, Base and Optimism.

WikiBit keeps the risk at Critical because:

  • restoration is still partial;
  • the independent forensic investigation is incomplete;
  • stolen-fund recovery is incomplete;
  • the full platform withdrawal stack is not scheduled to return until October 2.

Binance Funding Account — Medium

From today, Funding Accounts no longer support on-chain deposits.

Users should send ordinary crypto deposits to supported Spot Account routes, not assume an old Funding Account workflow still works.

Binance says the migration does not reduce balances. The risk is operational:

  • failed routing assumptions;
  • stale API references;
  • accounting/reporting confusion;
  • P2P workflow changes;
  • user confusion around Stocks Account settlement currencies.

Kraken Humanity/Beldex — High / Continuing

Krakens September 28–October 2 forced-liquidation window is now active for H, HUMANITY, BDX and BELDEX residual balances. The exchange warns that thin external liquidity can produce minimal or no proceeds.

Bitvavo — Medium / Continuing

Residual KAVA/XNO/RVN balances are in Bitvavos EUR-conversion process. Users should monitor final EUR credits and execution history.

③ Regulation and Licensing

Tether / Iran — High / Developing

The September 28 Senate PSI Democratic staff report is an investigation and policy document, not a court judgment or regulator enforcement order.

Its central findings include:

  • 846 Iran/proxy-linked sanctioned or seizure-targeted wallets analyzed;
  • 84% transacted exclusively or nearly exclusively in USDT;
  • the report alleges inconsistent proactive freezing by Tether;
  • Blumenthal asks Treasury/DOJ to investigate possible sanctions and banking-law issues.

Tethers response emphasizes:

  • approximately $550M Iran-linked USDT frozen in 2026;
  • $344M frozen in April across two addresses;
  • $130M frozen in July across four wallets;
  • global cooperation with >340 law-enforcement agencies in 67 countries.

Both can be true: a stablecoin can be widely used in sanctions-evasion networks and still provide an issuer-level freeze mechanism that law enforcement can use.

California — Medium / High

AB 2409 is a conflict-of-interest and platform-listing rule focused on official-linked meme coins, not a general meme-coin ban.

SB 1208 is more operationally significant for enforcement because it:

  • explicitly reaches digital assets in California money-laundering law;
  • authorizes warrant-based seizure from exchanges, custodians, addresses or similar locations under statutory conditions;
  • provides a civil/special forfeiture claims process;
  • prioritizes victim distribution;
  • sunsets the digital-asset provisions in 2032 unless extended.

UK FCA — High / Watch Tomorrow

The FCA gateway opens at 07:00 UK time on September 30. Existing MLR, payment-service or e-money status does not automatically convert into the new crypto permission.

Australia ASIC — High / Watch Tomorrow

ASIC‘s no-action transition expires September 30. ASIC’s latest reminder says firms needing a licence/variation that fail to satisfy transition conditions from October 1 may face civil/criminal consequences, including potentially significant financial penalties.

④ Hacks / Vulnerabilities / Asset Loss

Bitget — Critical, partial service restored

Bitgets latest official incident page says:

  • BTC withdrawals are open;
  • affected value is approximately $388M;
  • 12 hot/warm wallet addresses were associated with the incident;
  • 11 blockchains were involved;
  • private-key compromise has been ruled out;
  • the third-party security-product attack path remains the leading explanation;
  • internal credentials, approvals and withdrawal verification have been restructured after the incident.

This is materially stronger evidence of containment than the September 24–27 status.

Meter — Critical / Continuing

No final restart, supply reconciliation or audited economic-loss statement was verified in this run. The block-validation exploit remains an unresolved chain-integrity event.

Limit Break / Magic Eden — High / Continuing

The live recovery process does not remove risk for wallets that retain old approvals. Revocation remains the key user-level control.

⑤ User Complaints / Operational Anomalies

No new Community-only complaint cluster reached the threshold for a platform-wide standalone alert.

Todays highest user-error risks are official-transition related:

  • sending CoinEx assets after specific wallet/support changes;
  • depositing crypto to a Binance Funding Account route that no longer accepts on-chain deposits;
  • using fake Bitget “priority withdrawal” links;
  • using fake Magic Eden recovery/revoke sites.

Community claims about insolvency, secret compensation or special withdrawal channels remain Community / Unverified unless independently confirmed.

⑥ On-chain and Market Anomalies

Bitget remains the largest active stolen-fund tracking case.

The operational recovery of BTC withdrawals does not imply the stolen assets were recovered. Attackers can continue laundering while customers regain access.

Tether/Iran highlights the opposite property of stablecoins: unlike BTC/XRP/ETH, centrally issued USDT can be frozen at the token level. That capability is now central to both sides of the policy dispute—critics ask why more suspicious wallets were not frozen sooner, while Tether points to hundreds of millions already frozen as evidence of compliance value.

CoinEx creates a separate market anomaly today: non-USDT balances can transition from holder-selected exposure into platform-executed USDT disposal after the 02:00 UTC cutoff. This can create concentrated external selling in assets CoinEx must unwind.

⑦ Watchlist

Sep. 28–Oct. 2 — Kraken

  • Date / Window:Sep. 28–Oct. 2
  • What WikiBit Is Watching: H/HUMANITY/BDX/BELDEX liquidation results

Sep. 29 02:00 UTC — CoinEx

  • Date / Window:Sep. 29 02:00 UTC
  • What WikiBit Is Watching: Spot closure, CET repurchase, non-USDT disposal, CSC/OneSwap cessation

Sep. 29 08:00 UTC — Bitget

  • Date / Window:Sep. 29 08:00 UTC
  • What WikiBit Is Watching: ETH withdrawal restart across five networks

Sep. 29 onward — Binance

  • Date / Window:Sep. 29 onward
  • What WikiBit Is Watching: Funding Account deposit-routing changes and one-click migration

Sep. 30 07:00 UK time — FCA

  • Date / Window:Sep. 30 07:00 UK time
  • What WikiBit Is Watching: Crypto authorisation gateway opens

Sep. 30 — ASIC

  • Date / Window:Sep. 30
  • What WikiBit Is Watching: Sector-wide no-action transition expires

Sep. 30 08:00 UTC — Bitget

  • Date / Window:Sep. 30 08:00 UTC
  • What WikiBit Is Watching: USDT withdrawal restoration

Sep. 30 — Router Protocol

  • Date / Window:Sep. 30
  • What WikiBit Is Watching: Full shutdown target / treasury ROUTE burn

Sep. 30 17:00 UTC — Binance / Base

  • Date / Window:Sep. 30 17:00 UTC
  • What WikiBit Is Watching: Base-network deposit/withdrawal suspension

Sep. 30 18:00 UTC — Base

  • Date / Window:Sep. 30 18:00 UTC
  • What WikiBit Is Watching: Cobalt mainnet upgrade

Oct. 2 08:00 UTC — Bitget

  • Date / Window:Oct. 2 08:00 UTC
  • What WikiBit Is Watching: Other token withdrawals / fiat / P2P restoration

Oct. 3 — OKX TR

  • Date / Window:Oct. 3
  • What WikiBit Is Watching: Second phase of five-asset spot delistings

Dec. 22 02:00 UTC — CoinEx

  • Date / Window:Dec. 22 02:00 UTC
  • What WikiBit Is Watching: General withdrawal window ends

⑧ No New Development Today, but Still High Risk

Meter.io — Critical: chain restart, final invalid supply and recovery method remain unresolved.

Duelbits — High: final root cause and independently verified normal withdrawal operation remain unresolved.

Payy Network — High: bridge root cause, final loss/recovery and normal operations remain unresolved.

DCENT App Wallet — Critical: final root cause and multi-chain loss accounting remain unresolved.

Nostra — Critical: final bad debt, recovery and complete money-market reopening remain unresolved.

Neutron — Critical: final Astroport/Drop loss and governance remediation remain unresolved.

Liquid Network — Critical: corrected-chain integrity improved, but the latest official assessment still left approximately 602 BTC outstanding.

BitMart — Critical: no verified recovery percentage or withdrawal timetable in the latest WikiBit monitoring state.

FAQ

What is the most urgent deadline today?

CoinEx at September 29 02:00 UTC, especially for users who want non-USDT assets in original token form.

Did Bitget actually reopen withdrawals?

Yes. Bitget confirms BTC withdrawals resumed at 08:00 UTC on September 28 on Bitcoin and BSC. ETH is scheduled for September 29 at 08:00 UTC.

Did the U.S. Senate find Tether guilty of sanctions violations?

No. Democratic staff issued an investigative report and Senator Blumenthal requested Treasury/DOJ investigations. No violation has been adjudicated in this event.

How much Iran-linked USDT does Tether say it helped freeze?

Approximately $550 million in 2026.

Did California ban all meme coins?

No. AB 2409 targets issuance by covered public officials/employees and certain official-linked listings to California residents.

Will Binance users lose money in the Funding Account migration?

Binance says no. Non-stock crypto is moved 1:1 toward Spot Account handling; the main risk is using outdated deposit/API/account-routing workflows.

Miễn trừ trách nhiệm

Các ý kiến ​​trong bài viết này chỉ thể hiện quan điểm cá nhân của tác giả và không phải lời khuyên đầu tư. Thông tin trong bài viết mang tính tham khảo và không đảm bảo tính chính xác tuyệt đối. Nền tảng không chịu trách nhiệm cho bất kỳ quyết định đầu tư nào được đưa ra dựa trên nội dung này.
Bài viết trước

Newsom ký luật cấm quan chức công California phát hành memecoin

Bài tiếp theo

Tài khoản X của Shiba Inu đã theo dõi một token chỉ có 700 người theo dõi. Đây là điều đã xảy ra tiếp theo