Crypto Law Brief: Bitget Sets a Four-Day Withdrawal Clock, a Bridge Mints 10 Million Tokens, and Ether ETFs Shed $320 Million

The last two days brought an exchange cutting off customers on four days' notice, a bridge that minted ten million tokens nobody paid for, and another week of money leaving Ethereum funds. Each says something different about where your assets actually sit.

Bitget Gives Affected Users Until October 21 to Get Their Money Out

On October 16 Bitget added Russia, Belarus and Kazakhstan to its list of prohibited jurisdictions, announcing the change the next day. Affected customers must close open positions and withdraw before 10:00 a.m. Moscow time on October 21, and some lost the ability to open positions or place orders on October 18. Bitget says the closures target selected users rather than everyone in those countries, and that it is notifying those accounts individually.

No regulatory order has been cited, and Bitget has not said how many accounts are involved. A four-day window depends entirely on receiving and reading a notification, and positions still open at the deadline may be closed automatically. Exchange terms of service almost always reserve the right to restrict service for compliance reasons, and rarely promise notice.

A Cross-Chain Bridge Minted 10 Million Tokens Out of Nothing

At 12:31 UTC on October 17, an attacker minted 10 million CYS, about one percent of the token's stated supply, on BNB Smart Chain without authorization. Cysic blacklisted the receiving address roughly an hour and sixteen minutes later and suspended the bridge, pointing preliminarily to unauthorized access to a supporting database.

About 2.8 million tokens remained at the blacklisted address; the other 7.2 million are unaccounted for publicly, and no dollar loss figure has been released. Cysic says customer wallets were not drained, but that is a preliminary claim, not a finished audit. Supply inflation dilutes every holder even when no wallet is touched, and whether that is a compensable loss turns on what the issuer represented and who controlled the compromised database.

Ether Funds Keep Bleeding While Bitcoin Outflows Slow

U.S. spot Ether ETFs lost about $320 million in net outflows for the week ending October 16, against roughly $228 million from spot Bitcoin funds. On October 16 alone the two shed about $152 million combined, $82.39 million from Bitcoin products and $69.68 million from Ether ones, with BlackRock's iShares Ethereum Trust driving most of the latter.

Fund flows are not a legal event, but redemption pressure concentrated in one issuer's product is the kind of fact that surfaces later in disclosure and suitability disputes. Exposure through a registered fund is also a different legal posture from tokens on an exchange: one is a regulated wrapper carrying disclosure duties, the other a private contract.

Lagarde Puts a Date on the Digital Euro

In an October 17 statement to the IMF's monetary and financial committee, ECB President Christine Lagarde said a 12-month internal pilot of the digital euro is planned for the second half of 2027, and that adopting the enabling regulation by the end of 2026 is essential to that timeline. A pilot that soon implies intermediary obligations settled well before it, so the rules binding payment service providers are being drafted now. Firms custodying euro-denominated stablecoins should watch how the regulation treats private alternatives.

What This Means for You

If you hold assets on an offshore exchange, confirm that the contact details on the account are current and notifications enabled, and keep balances you cannot afford to lose off platforms whose terms permit restriction on short notice.

Restricted accounts, diluted supply and fund disclosure questions each follow a different legal path, and the deadlines differ. Account disputes usually turn on the terms of service and the arbitration clause inside them. Claims from an unauthorized mint turn on what the issuer represented and knew about its own infrastructure. Securities claims carry limitations periods that run from discovery. In every case, the record you build in the first days is the record you later litigate from.

At Coin Counsel, we work with individuals and businesses navigating the legal fallout of crypto fraud - whether you're a victim seeking recovery, a company facing regulatory scrutiny, or a project working to stay compliant in an increasingly complex legal landscape. The rules are evolving fast, and the cost of getting it wrong has never been higher. Contact us at coin-counsel.com to speak with a crypto-focused attorney today.

Disclaimer

This blog post is for informational purposes only and does not constitute legal advice. Reading this content does not create an attorney-client relationship between you and Coin Counsel or Franco Law PLLC. The legal landscape surrounding cryptocurrency is rapidly evolving and varies by jurisdiction. Do not act or refrain from acting based on information in this post without first consulting a qualified attorney. If you believe you have been the victim of crypto fraud, contact us at coin-counsel.com for a consultation.