Bitget Blames Zero‑Day Flaw in Third‑Party Tool for $387.5 Million Crypto Theft

On Wednesday, Bitget—a fast‑expanding crypto exchange—said the $387.5 million robbery that stunned the sector last week was enabled by an undisclosed zero‑day flaw in a security solution provided by a third‑party vendor.

The intrusion let the perpetrators sidestep defenses and shift sizable amounts of cryptocurrency from users’ wallets on Bitget’s platform. The exchange, which provides spot trading, futures and other derivatives, said the unauthorized moves were spotted soon after they happened, leading to an instant freeze of the compromised accounts and a comprehensive forensic probe.

SlowMist, an independent cybersecurity company hired to investigate, found that the malicious actions originated from the exploited zero‑day. The firm’s report indicates the defect lay within a third‑party security product that Bitget used for network monitoring and threat detection. As the flaw was undisclosed to the vendor, no fix or mitigation existed when the breach occurred.

Experts in security point out that supply‑chain vulnerabilities are increasingly worrisome for crypto services. Although exchanges usually implement multiple defensive layers, they still rely on outside tools for tasks like intrusion detection, anti‑DDoS shielding and transaction monitoring. Earlier events—such as the 2022 Binance breach that used stolen API keys and the 2021 Poly Network attack—demonstrate how bad actors can exploit the weakest component of a tangled security framework.

Bitget responded by stating it is working with law‑enforcement bodies in several jurisdictions while launching an extensive review of its security architecture. The platform committed to collaborating with the third‑party supplier to create a patch and is assessing ways to reimburse impacted users according to its internal risk‑management guidelines.

The incident revives demands from regulators and industry associations for tighter supervision of third‑party software employed by crypto platforms. Analysts anticipate that exchanges will boost spending on internal security resources and apply stricter vetting of outside vendors. As the probe proceeds, Bitget’s response may become a benchmark for how the industry tackles supply‑chain weaknesses in the rapidly changing digital‑asset arena.