SlowMist breaks down the Bitget hack: via a zero-day in third-party protection and a custom withdrawal tool

BitgetToken ($BGB) (@bitgetglobal) · Bitget (@bitget)

$BGB, ethereum (+robinhood): 0x54d2252757e1672eead234d27b1270728ff90581 · DexScreener

No keys were stolen: hackers got in through a vulnerability in a third-party security product, entered the admin panel posing as an employee and pushed forged withdrawals. $BGB was barely affected, the token is holding around $1.97.

Facts

• SlowMist writes that it found malicious activity in a third-party product with zero-day exploitation, access to its management platform under the identity of an internal employee and a custom withdrawal tool tailored to the wallet withdrawal logic.

• According to SlowMist, onchain transfers ran for about 2 hours 52 minutes across several networks, then attempts to forge withdrawal records and launch further BTC withdrawals followed. How the attacker moved between systems is still being studied. [page via link, September 30, 2026]

• Bitget confirmed SlowMist findings: third parties, zero-day and a custom tool for unauthorized withdrawals. According to the Mandiant report, the attacker got into third-party security devices, then into the wallet environment, to warm and hot wallets. [@bitget, September 30, 2026]

• Cointelegraph dates the first malicious activity to August 31, weeks before the theft of about $388 million. Bitget CEO Gracy Chen is "not very optimistic" about full recovery of funds. [page via link, September 30, 2026]

• $BGB on Dexscreener around $1.97, -1.79% per day; on MEXC BGBUSDT 1.98833. [dexscreener]

Waiting for

• Which exact third-party product was vulnerable and how the attacker moved between systems: SlowMist continues the investigation.

• USDT withdrawals open per Bitget schedule on September 30, other tokens, fiat and P2P on October 2.

post from telegram channel КриптоАтака 24 ⚡️ · post from telegram channel ahboyashreads · post from telegram channel Кэпитал News