SlowMist: Bitget Hack Traced to Zero-Day in Third-Party Product Since Aug. 31

The month-long gap between the first traces and the theft reframes this as a dwell-time failure, not a single exploit: the intrusion sat inside a third-party product and wallet host that Bitget relied on, so the exchange's own perimeter was never the decisive layer. That shifts scrutiny onto vendor and dependency risk across centralized venues, where security is only as strong as the least-visible component in the stack. The open question is whether other platforms using the same product disclose exposure, and whether exchange security reviews start treating third-party tooling as first-party risk.