SlowMist Reports Bitget Breach Traced to August Zero-Day Exploit

SlowMist founder Yu Xian disclosed preliminary findings regarding the Bitget asset transfer incident. Malicious activity began on August 31, when attackers exploited a zero-day vulnerability in a third-party security product. On September 25, attackers impersonated internal staff to access a security management platform, deploying custom tools to forge withdrawal parameters. Unauthorized on-chain transfers began at 02:31 on September 25 and lasted nearly three hours across multiple blockchains.