Uneasy Money: The $388M Bitget Hack Started With a Security Vendor

The Bitget hack exploited a security vendor, not Bitget's keys—underscoring that exchange security is only as strong as third-party suppliers.

• $388M Bitget hack: Attackers never obtained private keys; Pablo Sabbatella says a zero-day in a third-party security vendor's product let them spoof withdrawals past risk monitors, with funds drained non-instantly over hours.
• North Korea attribution and fast exit: Taylor Monahan attributes the hack to TraderTraitor (linked to Bybit, AFTX, Phemex, KlipDAO) and notes attackers rushed off Arbitrum within minutes via Circle Bridge, fearing a freeze.

Themes, sentiment and reasons are AI-written paraphrases, checked so they never quote an episode. They may contain errors. Not investment advice. Episodes remain the property of their creators.