BITGET HACK TIMELINE: HOW ITS OWN SYSTEM APPROVED A $387 MILLION THEFT

Summary from the TLDR InfoSec newsletter

On September 24, attackers stole $387.5 million from Bitget's hot and warm wallets by feeding false transaction data into a compromised backend system, which then authorized the transfers. Bitget detected unauthorized activity at 18:31 UTC, paused withdrawals hours later, and ruled out private-key theft. Mandiant and SlowMist are investigating. CEO Gracy Chen has flagged possible North Korean involvement.