Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M

Cryptocurrency exchange Bitget revealed that a threat actor leveraged a vulnerability within an external security tool to compromise internal administrative credentials. The attacker used these privileges on September 24 to issue unauthorized withdrawal commands, resulting in the theft of approximately $388 million from the wallet infrastructure.