Update On Slowmist and Mandiant Report

Mandiant, part of Google Cloud, and SlowMist have conducted independent investigations into Bitget's September 24 security incident, and their reports are now available. SlowMist's report can be found here, while the Mandiant report is live here. 

The findings broadly align with the attack path Bitget previously disclosed and covers how the incident unfolded. Both investigations identified the compromise of third-party security products that ultimately enabled unauthorized access to Bitget Exchange's wallet environment.

We appreciate the expertise and support of both teams throughout the investigation. Their findings will continue to strengthen our security controls.

Protecting our users and their assets remains our highest priority.