Bitget links reported $387.5 million theft to zero-day exploits in security products

From two security appliances to the wallet environment

Bitget said attackers compromised two third-party security appliances using zero-day exploits, placed web shells and malware in its environment, and used a custom withdrawal tool. The exchange said the activity led to unauthorized transfers from hot and warm wallets totaling $387.5 million. The cited investigations attributed the wallet-environment access to the compromised appliances.

The report does not establish a comparable prior security condition for Bitget or the third-party products involved.

Bitget has attributed the reported theft to attackers' exploitation of zero-day flaws in two third-party security appliances, followed by access to its production wallet job server.

The reported account connects a major cryptocurrency theft to vulnerabilities in third-party security products rather than describing the withdrawal activity alone. It also describes a path from compromised security appliances to systems involved in wallet operations.