<![CDATA[Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft]]>Bitget has confirmed that the $387.5 million theft it suffered last week was carried out by attackers exploiting a zero-day vulnerability in third-party security products. The exchange cited findings from an ongoing investigation conducted by SlowMist.

According to the investigation, malicious activity involving third-party security products was identified, including the zero-day flaw. Investigators also recovered a customized tool that the attacker had used during the intrusion.

Key points from the disclosure:

  • Confirmed stolen amount: $387.5 million
  • Root cause: zero-day vulnerability in third-party security products
  • Investigation led by SlowMist
  • A customized attacker tool was recovered as part of the probe

The exchange says its investigation remains ongoing. Notably, no specific CVE identifier has been disclosed for the zero-day at this time.

Source: The Hacker News

Does your organization rely on third-party security tooling in ways that could widen your exposure to a supply-chain-style zero-day like this?

]]>https://xploitlk.com/topic/526/bitget-confirms-third-party-zero-day-behind-387.5-million-cryptocurrency-theftRSS for NodeTue, 27 Oct 2026 10:12:56 GMTThu, 01 Oct 2026 06:30:35 GMT60