SlowMist: Bitget Hack Involved Third-Party Zero-Day Vulnerability

SlowMist released a progress report on the September 25 Bitget hot wallet breach. Investigations revealed that attackers exploited a zero-day vulnerability in a third-party security product starting August 31. On September 25, unauthorized access to a management platform allowed attackers to use custom withdrawal tools. On-chain activity began at 02:31 and lasted approximately 2 hours and 52 minutes, involving cross-chain transfers and attempts to manipulate withdrawal records.