Bitget

Bitget's VOXEL Meltdown: Post-Mortem Analysis

What Happened

On April 20-22, 2025, Bitget's VOXEL/USDT trading pair experienced a catastrophic malfunction when the exchange's market-making bot entered a degenerate trading loop. The bot repeatedly bought and sold the token every three seconds at predictable price points, creating an arbitrage opportunity that traders exploited for massive gains before the exchange froze accounts and reversed transactions.

Technical Root Cause

Bitget's market-making algorithm lacked fundamental safeguards:

• No circuit breakers to halt malfunctioning bots

• No position limits on individual trades

• No sanity checks on the bot's logic

• Illiquid token paired with leverage created systemic vulnerability

The bot oscillated VOXEL prices between $0.125 and $0.138 "with robotic precision," signaling a broken algorithm executing buy-high, sell-low operations repeatedly rather than the intended market-stabilizing function.

Attack Vector/Exploit Steps

1. Pattern recognition: Traders identified the bot's predictable three-second oscillation cycle

2. Leveraged positioning: Entered amplified positions riding the bot's mechanical movements

3. Scaling withdrawals: Early-exit traders withdrew profits before account freezes took effect

4. Volume explosion: 24-hour trading volume reached $12.7 billion—surpassing Bitcoin on the platform

Financial Impact

• Estimated total drain: Over $100 million before exchange intervention

• Individual gains documented:

• One trader reportedly gained $42 million

• Another converted $100 into approximately $3 million

• Protection fund hit: Bitget's $300 million emergency reserve deployed for compensation

Remediation & Fund Recovery

• Account freezes on suspected exploitation participants

• Rollback of trades executed during the malfunction window

• "Abnormal trading activity" designation applied retroactively

• Opened support tickets for affected users to claim losses

• Deployed protection fund reserves

• Promised "strengthened risk control systems" and additional safeguards

• Selective transaction reversal based on unilateral manipulation accusations

• No transparent criteria for which trades would be reversed

• Questions remain about similar vulnerabilities on other token pairs

Notable Context

Exchange CEO Gracy Chen faced irony accusations after "publicly roasted Hyperliquid just weeks ago" for trade reversals, then implemented identical rollback procedures herself.