Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

Bitget said the attacker who stole about $388 million exploited a vulnerability in a third-party security product to obtain high-level internal credentials. On September 24, they used those credentials to send fraudulent withdrawal commands to Bitget's wallet system. The exchange said most funds were stolen from its hot wallet, and it is working with law enforcement.