SlowMist Reveals Technical Breakdown of Bitget $388M Drain 🔍🚨
SlowMist published its forensic autopsy of the 25 September 2026 Bitget incident, detailing how attackers drained roughly $388M from hot wallets without touching private keys or cold storage 💻🛡️
Investigation findings reveal a multi-step breach:
🔹 On 31 August 2026, attackers used a zero-day flaw in third-party software to grab database passwords.
🔹 On 25 September 2026, they logged into a security console using stolen employee logins to upload malware.
🔹 Attackers ran a custom tool that forged risk-control checks to trigger valid transfer requests.
🔹 On-chain transfers ran for roughly 2 hours and 52 minutes across multiple chains before being halted.
🔹 Later attempts to tamper with database records and force Bitcoin withdrawals failed with errors.
Bitget has already resumed phased withdrawals starting on 28 September 2026, with customer balances 100% covered by its $464M+ Protection Fund.
Do you store crypto on exchanges or cold wallets? 👇
#Bitget #SlowMist #CryptoSecurity #HotWallet
SlowMist published its forensic autopsy of the 25 September 2026 Bitget incident, detailing how attackers drained roughly $388M from hot wallets without touching private keys or cold storage 💻🛡️
Investigation findings reveal a multi-step breach:
🔹 On 31 August 2026, attackers used a zero-day flaw in third-party software to grab database passwords.
🔹 On 25 September 2026, they logged into a security console using stolen employee logins to upload malware.
🔹 Attackers ran a custom tool that forged risk-control checks to trigger valid transfer requests.
🔹 On-chain transfers ran for roughly 2 hours and 52 minutes across multiple chains before being halted.
🔹 Later attempts to tamper with database records and force Bitcoin withdrawals failed with errors.
Bitget has already resumed phased withdrawals starting on 28 September 2026, with customer balances 100% covered by its $464M+ Protection Fund.
Do you store crypto on exchanges or cold wallets? 👇
#Bitget #SlowMist #CryptoSecurity #HotWallet
