Bitget, one of the world’s larger cryptocurrency exchanges, confirmed that attackers siphoned roughly $387.5 million by exploiting a zero‑day vulnerability in a third‑party security product used by the platform.
Mechanics of the attack
According to reporting by Rescana, the breach was carried out through a previously unknown flaw—commonly referred to as a zero‑day—in a security solution that Bitget had integrated to protect its hot wallets. The exploit allowed the perpetrators to bypass authentication checks and move funds directly to external addresses before the breach was detected.
"A zero‑day vulnerability in a third‑party security product allowed attackers to siphon $387.5 million from Bitget," Rescana wrote.
The stolen assets were reportedly a mix of major tokens, though the precise composition has not been disclosed. Bitget has engaged forensic investigators and is cooperating with law‑enforcement agencies, but has not provided a timeline for fund recovery.
Broader security implications
The incident arrives at a moment when the crypto sector is confronting multiple stressors. Crypto Briefing highlighted that the Ethereum unstaking queue has surged 392 % since the start of October, reflecting heightened user activity and liquidity pressures on staking platforms. Such dynamics amplify the importance of robust custodial safeguards, especially for centralized exchanges that hold large volumes of user assets.
In a separate analysis, Crypto Economy argued that the Bitget hack underscores “the fatal limits of CEX security,” suggesting that reliance on external security vendors can introduce single points of failure. The piece warned that even exchanges with extensive security budgets remain vulnerable if third‑party components are not rigorously vetted and continuously patched.
The security community echoed these concerns. The Security Affairs newsletter, in its Round 598 edition, noted that the attack “demonstrates the growing sophistication of threat actors targeting the crypto supply chain” and called for industry‑wide standards for third‑party risk management.
While the exact impact on Bitget’s market share is yet to be quantified, the loss is likely to affect user confidence across the centralized exchange (CEX) landscape. Investors and traders, already navigating a volatile market where major digital assets have seen pronounced price swings, may reassess the risk‑reward balance of keeping funds on custodial platforms.
Regulators in several jurisdictions have previously highlighted the need for stronger oversight of crypto service providers. The Bitget breach could accelerate calls for mandatory security audits and disclosure requirements for exchanges, particularly regarding the use of outsourced security tools.
For now, Bitget’s users await further updates on fund recovery and potential compensation measures. The episode serves as a stark reminder that, despite advances in blockchain security, the broader technology stack surrounding crypto operations remains a critical—and sometimes fragile—line of defence.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $85,378 | +0.64% | $1715.5B |
 Ethereum ETH | $2,702 | +0.72% | $330.0B |
 BNB BNB | $788.91 | -0.31% | $105.1B |
 XRP XRP | $1.51 | +1.36% | $95.1B |
 Solana SOL | $121.53 | +1.45% | $71.5B |
 Dogecoin DOGE | $0.0956 | +2.71% | $14.9B |
 Cardano ADA | $0.256 | +4.59% | $9.6B |
Live data: CoinGecko — 2026-10-04 19:23 UTC
