SlowMist links Bitget hack activity to Aug. 31 zero-day exploit

SlowMist says the earliest malicious activity tied to Bitget’s large theft began on Aug. 31, when an attacker exploited a zeroday flaw in a thirdparty security product. According to the investigation, the attacker later used access to security systems and wallet infrastructure to carry out fraudulent withdrawal activity. SlowMist said the stolen funds were moved from Bitget hot wallets on Sept. 24 and transferred across multiple blockchains to addresses controlled by the attacker. The security firm said it is still working to understand how the attacker moved between affected systems. Bitget has said roughly $387.5 million was sent to attackercontrolled addresses, and the exchange says its private keys and cold wallets were not compromised.