← Back to overview

Cryptocurrency exchange Bitget confirmed that attackers stole $387.5 million by exploiting a zero-day vulnerability in third-party security products. The breach was investigated by blockchain security firm SlowMist, which identified malicious activity linked to the zero-day flaw. Attackers used a customized tool during the intrusion, suggesting a sophisticated and targeted operation. The incident highlights significant risks posed by third-party security product vulnerabilities in the cryptocurrency sector. The full scope of the investigation is ongoing, with further details expected as findings are released.

Affected products

  • Bitget
  • Third-Party Security Products

Categories

  • Data Breach & Exfiltration
  • Emerging Technologies
  • Supply Chain & Dependencies
  • Zero-Day Vulnerabilities