Bitget Had 30 Minutes to Contain Its Hack Before $290 Million Started Moving

Bitget flagged unauthorized transfers at 18:31 UTC on Sept. 24 and activated emergency protocols, but Hypernative found most losses came later: $87.6M left hot wallets at 19:01 and $202.8M left warm wallets at 19:16, two bursts of 24 seconds making up roughly three-quarters of the $387.5M stolen. Bitget said attackers compromised a backend wallet system and tricked its authorization process into approving transfers without compromising private keys; the transactions were signed by Bitget's own wallets and closely resembled ordinary withdrawals.