Bitget Hacked via Third-Party Zero-Day

Bitget lost $387.5 million after attackers exploited a zero-day in two third-party security appliances, then moved laterally to its production wallet server and deployed a custom withdrawal tool. Theft ran nearly three hours across multiple blockchains on September 25. Bitget blames North Korean hackers and has suspended withdrawals while offering a 5% recovery bounty.