Bitget Hack: Attacker Infiltrated Systems Nearly a Month Before Theft

Cybersecurity firm SlowMist, hired by Bitget to investigate a recent security breach, revealed that the attacker had been active within the exchange's systems since August 31, nearly a month before funds were drained. The preliminary report indicates that the breach involved vulnerabilities in two third-party security products and a wallet application server. Bitget, which estimates the stolen assets at approximately 387.5 million dollars, confirmed that the findings align with their internal investigation. The attacker utilized a zero-day vulnerability in a third-party service to access database credentials and later compromised the management platform of another security product by impersonating an internal employee.