🔤 UPD: The $352M Bitget Hack Started Almost a Month Earlier

CRYPTO ROAST, @roasted_crypto

Открыть в Telegram
#1981Текст

🔤 UPD: The $352M Bitget Hack Started Almost a Month Earlier 🟠Remember the $351.6M Bitget hack? SlowMist’s investigation suggests the actual operation didn’t begin on September 24. The first traces of malicious activity reportedly appeared as early as August 31. 🟠According to SlowMist, the attacker exploited a zero-day vulnerability in a third-party security service, gaining access to its database. Malicious activity was later identified on two additional nodes — suggesting the attackers were already establishing their foothold weeks before the money moved. 🟠Then on September 25, the attacker reportedly compromised another third-party security service using an employee account and began uploading malicious files. The attackers had also prepared a tool specifically designed for Bitget’s internal systems. 🟠That tool could allegedly forge risk-control parameters, automatically generate withdrawal requests and execute them. Once the theft began, assets were withdrawn across multiple blockchains for almost three hours. 🟠SlowMist is still investigating exactly how the attackers moved between the compromised systems. But the timeline makes one thing clear: this wasn’t a quick wallet exploit. It appears to have been a multi-stage operation prepared weeks in advance. 🟠Meanwhile, Bitget is gradually restoring withdrawals. USDT withdrawals are now available on Ethereum, BSC, Solana and Tron, while BTC and ETH withdrawals had already been reopened. 👉 The $352M disappeared in hours. The attack behind it may have been running for almost a month.

Открыть в Telegram
Просмотры1 589−64%к среднему
Пересылки4
Реакции61
Комментарии—

Реакции

  • 👍28
  • ❤19
  • 🥰13
  • 🔥1

Ещё посты канала CRYPTO ROAST

  1. 01
    Просмотры7,83 тыс.
    Пересылки1
    Реакции415
    Комментарии—
  2. 02
    Просмотры7,29 тыс.
    Пересылки1
    Реакции404
    Комментарии—
  3. 03
    Просмотры7,16 тыс.
    Пересылки1
    Реакции421
    Комментарии—
  4. 04

    🔤 UPD: $115M COLDCARD Hacker Starts Moving the Bitcoin 🟠Remember the COLDCARD seed-generation flaw that allowed attackers to reconstruct weak private keys and drain thousands of wallets? The stolen funds are finally starting to move. 🟠According to Galaxy Digital’s Alex Thorn, the third-wave attacker moved stolen $BTC on-chain for the first time, swapping part of it into $ETH through THORChain — likely the beginning of the laundering and cash-out phase. 🟠The scale is now estimated at 1,789.28 BTC worth roughly $114.7M, stolen from 8,865 addresses across the full series of attacks. Until now, funds from all three waves had reportedly remained sitting in the attackers’ original wallets. 🟠The hacker is apparently having some trouble. Several THORChain swaps were reportedly refunded, but attempts to move the Bitcoin continue. Around 90% of the third-wave funds still haven’t moved. 🟠Thorn says the BTC routed through THORChain has already been traced to new Ethereum addresses, with the information shared with authorities and crypto companies. Moving across chains may complicate tracking — but it also creates an entirely new trail for investigators to follow. 🟠The exploit phase is basically over. Now comes the harder part for the attacker: turning $115M of publicly traceable stolen Bitcoin into spendable money without touching infrastructure willing to freeze it. 👉 Stealing crypto is one problem. Laundering nine figures on a public blockchain is another.

    Текст
    Просмотры7,05 тыс.
    Пересылки2
    Реакции396
    Комментарии—
  5. 05
    Просмотры6,86 тыс.
    Пересылки1
    Реакции352
    Комментарии—

Все посты канала CRYPTO ROAST