Bitget says attacker stole $388M via third-party security flaw

Crypto exchange Bitget said an attacker stole about $388 million by exploiting a vulnerability in a third-party security product it used. The attacker obtained high-level internal credentials and on September 24 used them to send fraudulent withdrawal commands to Bitget's wallet system.

• Losses from the Bitget attack are estimated at about $388 million
• Access was gained via a flaw in a third-party security product
• Stolen credentials were used on September 24 to issue withdrawal commands