vulnerabilityThe Hacker News - Third-Party Zero-Day
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Bitget confirmed that attackers who stole $387.5 million exploited a zero-day vulnerability in third-party security products. The finding was attributed to an ongoing investigation by SlowMist, which identified malicious activity involving the products and recovered a customized attacker tool.
Exploitation evidence
Has exploited
Affected software
| Software | Affected versions | Fixed in | Sources |
|---|---|---|---|
CVSS (Common Vulnerability Scoring System)
Preferred assessment
Vector
Attack vector
Attack complexity
Privileges required
User interaction
Scope
Confidentiality impact
Integrity impact
Availability impact
Source assessments
EPSS (Exploit Prediction Scoring System)
Probability
Percentile
Model
Preferred remediation
Action