Bitget Attacker Ran Test Transfers Before $388M Theft, CEO Says

The detail that matters here is not the size of the loss but the method: a deliberate probe of risk controls before the main event. That pattern implies the attacker expected detection to be possible and tested the response window rather than relying on a single blind exploit. For other venues, the takeaway is operational — the value of catching small anomalous transfers is only as good as the speed of the reaction they trigger. Whether exchanges treat these preliminary movements as a tripwire or as noise is the open question.