Bybit will begin migrating a substantial amount of USDC to newly created hot wallets on September 4, 2026, and told users a day in advance that the resulting large onchain transfers are internal. The work runs through September 10.
The Big Picture
- Bybit starts deploying new hot wallet infrastructure on September 4, shifting USDC from existing wallets to newly created addresses.
- The exchange expects the migration to finish by September 10, with the timeline subject to operational scope.
- Bybit says the movements are internal, that user funds are safe, and that no user action is required.
- The notice is the third wallet upgrade Bybit has pre-announced since December 2025.
- Bybit has not disclosed the size of the USDC transfer, the chains involved, or the new wallet addresses.
Bybit rebuilds its hot wallets in public
Bybit posted the notice on September 3, one day before the work starts. The exchange said it would deploy new hot wallet infrastructure and carry out “the migration of a substantial amount of USDC holdings to optimize our wallet distribution system.” Anyone watching a block explorer will see heavy traffic between Bybit addresses, on a venue whose user and reserve figures rank among the market’s largest.
“These fund movements are entirely internal and are part of routine operational upgrades,” Bybit said in the announcement. The company repeated the message on its official X account.
The notice also stops well short of specifics. It names no dollar figure, no blockchains, no count of new addresses, and no signing arrangement behind them. Onchain analysts will have to size the migration themselves once the first transfers land.
📢 Announcement: Hot Wallet Infrastructure Upgrade
— Bybit (@Bybit_Official) September 3, 2026
Starting Sep 4, 2026, Bybit will be conducting a hot wallet infrastructure upgrade through Sep 10, involving internal USDC transfers between existing and newly created wallets.
A pre-announcement pattern, now three notices deep
Bybit has run this play before. It published near-identical notices for wallet upgrades beginning December 12, 2025 and January 21, 2026, each describing internal transfers between existing and newly created wallets. The September notice makes it a third round inside nine months, turning a one-off courtesy into standing procedure.
The habit has an obvious origin. Attackers drained roughly $1.5 billion in Ethereum from a Bybit wallet in February 2025, the largest crypto theft recorded to date, and the FBI tied it to North Korean actors it tracks as TraderTraitor, better known as the Lazarus Group. Since then, an unexplained large outflow from a Bybit address carries a weight it would not at a venue without that history.
CoinLaw’s Takeaway
Pre-announcing an internal migration is cheap insurance for an exchange whose last unexplained outflow cost it more than a billion dollars. A notice filed a day ahead gives onchain trackers a reference point, so an alarm about a draining wallet can be checked against a published schedule rather than a rumor. What the exchange pays for that is a short public window in which its wallet map is visibly in motion.
For anyone holding assets on the platform, the useful step is verification. Alerts and messages referencing the migration can be checked against the notice on Bybit’s own announcements page and its verified X account before anyone acts on them.
