Bitget had 30 minutes to contain its hack before $290 million started moving
Bitget detected unauthorized wallet transfers at 18:31 UTC on Sept. 24, but major withdrawals followed: $87.6 million left hot wallets at 19:01 and $202.8 million left warm wallets at 19:16. Hypernative estimates about $387.5 million was ultimately moved, with the two largest bursts accounting for roughly three-quarters of the total. Bitget says an attacker compromised a backend wallet system and manipulated withdrawal authorization, while private keys remained secure. Hypernative identified possible safeguards, including independent transaction verification, anomaly checks, transfer limits and automatic signer suspension. Attacker-linked transfers continued until 21:23 UTC. Bitget says it fixed the vulnerability, and Mandiant and SlowMist are investigating.
