SlowMist stated that Bitget has commissioned them to investigate the theft of assets from its hot wallet on September 25. As of September 29, the investigation revealed that the attack involved a zero-day vulnerability in a third-party security product, and the attacker had used an internal employee's identity to gain unauthorized access to the management platform of the third-party product. SlowMist also traced a highly customized tool targeting Bitget's wallet withdrawal logic. The on-chain attack began at 02:31 (UTC+8) on September 25 and lasted approximately 2 hours and 52 minutes across multiple chains. Following this, the attacker attempted to tamper with withdrawal records and triggered an additional BTC withdrawal. https://www.(wublock123.com)/news/slowmist-bitget-hot-wallet-theft-third-party-zero-day-insider-impersonation-69266