Blockchain Report on Nostr: GoPlus Security attributes Bitget's $387.5 million exploit to a compromised signature ...

GoPlus Security attributes Bitget's $387.5 million exploit to a compromised signature trust chain rather than a private key leak. The analysis reveals attackers infiltrated key backend systems to forge transaction data, enabling Bitget's own authorization process to generate valid signatures for unauthorized transfers. GoPlus noted a roughly two-hour and twenty-five-minute window for fund transfers, with a significant $185 million moved in approximately one minute. The security firm has blacklisted the attacker's addresses and shared this information with ecosystem partners. GoPlus also identified a structural risk in the signature chain, similar to a 2025 Bybit incident. However, Bitget has not yet released a full technical report, leaving the precise initial intrusion method unconfirmed.

#crypto #blockchain #news