Bitget hack: Where did the stolen $387M go?
Bitget‘s attacker has moved much of the exchange’s $387.5 million theft toward Bitcoin through cross-chain services, while only around $840,000 had been publicly frozen five days after the Sept. 24 breach. BlockSec reported that the stolen funds followed three main paths: quickly converting assets that issuers could freeze, consolidating value from several chains into Bitcoin and gradually sending BTC into CoinJoin transactions. The security firm based its analysis on addresses published through Bitgets tracking dashboard and a Sept. 29 snapshot, meaning the balances and laundering totals can continue changing as funds move. How did the Bitget hacker move the stolen money? Bitget said the breach began at 18:31 UTC on Sept. 24 with unauthorized transfers from portions of its hot and warm wallet infrastructure. BlockSec found that the first transactions involved tiny test transfers of 0.84 ETH and 93 TRX. Larger withdrawals started at 18:58 UTC, while Bitgets reconciliation system detected a discrepancy seven minutes later and blocked ordinary customer withdrawals. The attackers were not relying on the normal customer withdrawal process, according to Bitget. The exchange said a vulnerability in a third-party security product gave the attackers high-level internal credentials, which were then used to submit forged withdrawal commands directly into its wallet system. Private keys









