Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
-
Bitget has confirmed that the $387.5 million theft it suffered last week was carried out by attackers exploiting a zero-day vulnerability in third-party security products. The exchange cited findings from an ongoing investigation conducted by SlowMist.
According to the investigation, malicious activity involving third-party security products was identified, including the zero-day flaw. Investigators also recovered a customized tool that the attacker had used during the intrusion.
Key points from the disclosure:
- Confirmed stolen amount: $387.5 million
- Root cause: zero-day vulnerability in third-party security products
- Investigation led by SlowMist
- A customized attacker tool was recovered as part of the probe
The exchange says its investigation remains ongoing. Notably, no specific CVE identifier has been disclosed for the zero-day at this time.
Source: The Hacker News
Does your organization rely on third-party security tooling in ways that could widen your exposure to a supply-chain-style zero-day like this?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login