Bitget got drained for roughly $388M after attackers lifted internal credentials through a busted third-party security tool and forged withdrawal commands straight out its hot wallets. Another day, another exchange learning the hard way that hot wallets are basically a piñata. You keep your coins there while you trade, they keep them there while they get rekt. Everybody wins except you. And the best part? This is just one line item in a quarter that's already past a billion in losses.
▪️ The exchange spotted unauthorized transfers on Sept 24 and slammed withdrawals shut — by then the cash was already gone. Great reflexes, wrong timing.
▪️ Slowmist traced the crew's activity back to an Aug 31 zero-day — three weeks of nobody noticing anything. Three weeks. Not three hours. Three weeks.
▪️ That single hit ate about 31% of everything stolen across crypto last quarter. One exchange, a third of the quarter's loot.
▪️ September alone bled roughly $769M over 99 separate incidents. Ninety-nine. That's not a bad month, that's a season pass to the rekt buffet. And you thought your portfolio was having a rough time.
▪️ Exploits did almost all the damage that month — $734M across 58 jobs, 96% of September's pain. The other 4%? Don't ask. It's always something dumb. The classics never die.
▪️ Only $273M got frozen or handed back; adjusted September damage still sits at $495.3M. So the rest is out there, probably being laundered through some shitcoin as we speak.
Every dollar here came out of somebody's account while they slept — hot wallets are exactly where your coins sit when you're actively trading an exchange. Read that again. If it's on an exchange, it's not your wallet. It's their hot wallet, and you're just exit liquidity with a login. The house doesn't get hacked; the house gets drained, and then the house pauses withdrawals and tells you to stay calm. Meanwhile the attackers already moved on. So next time you see we're aware of an incident, just know that's corporate for your money is gone and we're lawyering up. The lesson? If you're trading, you're exposed. If you're holding, you're exposed. The only difference is whether you find out from a tweet or a withdrawal error.
@pixeos
