SlowMist Links Bitget Hack to Zero-Day Vulnerability

Blockchain security firm SlowMist reported that the $388 million hack of Bitget originated from a zero-day vulnerability in a third-party security product on August 31. Attackers later used employee credentials to access a second system on September 25, deploying custom tools to bypass risk controls and drain hot wallets. Bitget's CEO confirmed that private keys and cold wallets remain secure, though full recovery of funds remains uncertain.