๐จ๐จ๐จ ATTENTION ๐จ๐จ๐จ
๐๐๐GoPlus: The hacking of $387.5 million on Bitget exploited the trust chain in transaction signing, not the private keys๐๐
๐ฅ๐ฅ๐ฅGoPlus Security said its review of the $387.5 million security incident involving Bitget found that the attack did not involve a private key leak, but rather a compromise of the trust chain in transaction signing.๐ฅ๐ฅ๐ฅ
๐๐๐ The attackers breached a critical wallet backend system, falsified transaction data, and caused Bitgetโs authorized signing flow to generate valid signatures for transfers the exchange did not intend to make.๐๐๐
โฏ๏ธโฏ๏ธโฏ๏ธGoPlus said the fund-draining window lasted about 2 hours and 25 minutes, with the biggest wave moving around $185 million in about one minute.โฏ๏ธโฏ๏ธโฏ๏ธ
๐๐It has blacklisted addresses linked to the attackers and shared them with ecosystem partners. GoPlus said the incident shows structural similarities to the 2025 Bybit hack, although Bitget has not yet published a complete technical report and the initial intrusion method remains unconfirmed.๐
#CircleMints500MUSDCOnSolana
#SECSaysTokenBuybacksNotAutoSecurities
$BERA
$OP
$WLD
๐๐๐GoPlus: The hacking of $387.5 million on Bitget exploited the trust chain in transaction signing, not the private keys๐๐
๐ฅ๐ฅ๐ฅGoPlus Security said its review of the $387.5 million security incident involving Bitget found that the attack did not involve a private key leak, but rather a compromise of the trust chain in transaction signing.๐ฅ๐ฅ๐ฅ
๐๐๐ The attackers breached a critical wallet backend system, falsified transaction data, and caused Bitgetโs authorized signing flow to generate valid signatures for transfers the exchange did not intend to make.๐๐๐
โฏ๏ธโฏ๏ธโฏ๏ธGoPlus said the fund-draining window lasted about 2 hours and 25 minutes, with the biggest wave moving around $185 million in about one minute.โฏ๏ธโฏ๏ธโฏ๏ธ
๐๐It has blacklisted addresses linked to the attackers and shared them with ecosystem partners. GoPlus said the incident shows structural similarities to the 2025 Bybit hack, although Bitget has not yet published a complete technical report and the initial intrusion method remains unconfirmed.๐
#CircleMints500MUSDCOnSolana
#SECSaysTokenBuybacksNotAutoSecurities
$BERA
$OP
$WLD
