Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft

AI Summary

Cryptocurrency exchange Bitget confirmed attackers stole $387.5 million by exploiting a zero-day vulnerability in unnamed third-party security products, with forensic findings attributed to blockchain security firm SlowMist. The incident underscores the systemic risk of supply-chain dependencies in crypto platform security architectures, where a single third-party flaw can enable nine-figure theft.

Read full article → https://thehackernews.com/2026/10/bitget-confirms-…

Relevance score: 89.0/100

# More from October 02

1
Hackers stole Pentagon personnel records of over 3 million people BleepingComputer
2
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks BleepingComputer
3
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV The Hacker News
5
Police dismantle KillSec ransomware gang allegedly led by 16-year-old BleepingComputer
6
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs The Hacker News
7
Russian state hackers use new RedFlick technique to push malware BleepingComputer
8
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path The Hacker News
9
Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure SecurityWeek
10
OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates The Hacker News