According to The Block,
Bitget CEO Gracy Chen has confirmed that the perpetrator responsible for draining $388 million from company funds conducted preliminary tests against risk controls approximately thirty minutes prior to executing the full-scale theft. This investigative detail sheds light on the methodical approach taken by attackers targeting centralized exchanges and highlights specific vulnerabilities in automated security protocols.
The incident unfolded when malicious actors initiated two small transfer operations designed specifically to gauge the effectiveness of Bitget’s internal monitoring systems before proceeding with a massive exfiltration attempt. By successfully passing these initial hurdles, the attacker demonstrated knowledge of how risk assessment algorithms evaluate transaction patterns and legitimacy thresholds within high-volume trading environments.
This sequence of events suggests that sophisticated cybercriminals are increasingly capable of bypassing standard security filters through strategic probing rather than brute force attacks alone. The ability to manipulate or mimic legitimate behavior during these test phases allowed the attackers to gain unauthorized access without triggering immediate alerts from Bitget’s surveillance infrastructure.
The revelation underscores critical implications for digital asset custody solutions and exchange operators globally, emphasizing the need for more robust detection mechanisms capable of identifying subtle anomalies in transaction flows. As regulatory scrutiny intensifies across cryptocurrency markets, understanding these attack vectors becomes essential for developing resilient defense strategies against evolving threats targeting user deposits and platform integrity.
The Block continues to monitor developments regarding this case as authorities investigate further details surrounding the breach and potential legal consequences facing those involved in orchestrating the cyberattack.
