Bitget Confirms Zero-Day Behind $387.5 Million Crypto Theft
· Cybersecurity
Cryptocurrency exchange Bitget confirmed that attackers who stole $387.5 million last week exploited a zero-day flaw in third-party security products, citing an investigation by SlowMist. The incident highlights supply-chain risk from third-party security tooling used by financial platforms.
Why it matters:A nine-figure theft tied to a third-party security product shows how upstream vendors can become a single point of failure for crypto exchanges and other high-value financial targets.
Key points
- Stolen amount was $387.5 million, according to Bitget.
- SlowMist investigation pointed to malicious activity involving third-party security products.
- Bitget said it is continuing to investigate the incident.
Sources (original reporting)
More stories from this day
- CISA Adds Exploited Cisco Catalyst SD-WAN Manager Flaw to KEV
- Police Dismantle KillSec Ransomware Gang, Three Arrested
- Warlock Ransomware Hits Large Spanish and Portuguese Organizations
- OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI
- Nvidia launches Open Agent Safety Platform to contain rogue AI agents
- France at Center of Global Bond Rout as Paris Plans Big Spending Cuts