Bitget said its attacker may have exploited a third-party security-product vulnerability to obtain high-level internal credentials and use them to send fraudulent withdrawal commands that bypassed existing risk controls.

verified span

“The attacker then appears to have used those credentials to impersonate authorized activity and send fraudulent withdrawal commands to the wallet system, resulting in abnormal transfers that bypassed existing risk controls.”