Bitget Blames Third-Party Zero-Day in $387.5M Crypto Heist

Cryptocurrency exchange Bitget has confirmed that a devastating $387.5 million theft was made possible through a previously unknown zero-day vulnerability in third-party security products. According to findings from blockchain security firm SlowMist, attackers leveraged a custom-built tool to exploit weaknesses in external software integrated into Bitget's infrastructure.

The breach underscores the growing threat posed by supply chain attacks, where vulnerabilities in trusted third-party components can lead to catastrophic losses. As organizations continue to rely heavily on external vendors for security solutions, this incident serves as a stark reminder of the need for rigorous vetting and continuous monitoring of all integrated technologies.

Attack Vector and Investigation Insights

• The attack exploited a zero-day vulnerability in third-party security software used by Bitget.
• Blockchain security firm SlowMist led the investigation and identified a custom malware tool used in the breach.
• No evidence suggests that Bitget’s core systems were directly compromised.
• Funds were drained across multiple transactions shortly after the initial compromise.

Implications for Enterprise Security Teams

• Organizations must extend their security reviews to include third-party vendor assessments.
• Supply chain attacks are increasingly common and difficult to detect without proactive monitoring.
• Relying solely on external vendors for security can introduce blind spots and unpatched risks.
• Incident response plans should account for breaches originating from partner ecosystems.

Sources

• Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft