Xie Jiayin: Bitget has completed a full fix of the vulnerability and implemented four rectification measures.

Xie Jiayin, Head of Bitget’s Chinese-speaking Region, said during the "Bitget Incident Review" live stream that the exchange has completed a full fix for the vulnerability and implemented the following rectification measures: First, isolate affected systems: relevant servers have been network-isolated to contain the attack spread, with evidence preserved for tracing. Second, reset internal credentials and tighten high-sensitivity permissions: all internal login credentials have been invalidated and reissued, the credentials stolen by attackers are now invalid, high-sensitivity permissions have been fully revoked and re-segmented, and critical operations require multi-person approval. Third, notify relevant third-party security vendors of the vulnerability details and assist in analysis and repair; relevant functions were suspended before the fix was completed. Fourth, all subsequent withdrawals will require independent verification. The incident was triggered by attackers exploiting a vulnerability in a third-party security product to steal Bitget’s internal network permission credentials and forge withdrawal instructions to the wallet system. Bitget immediately contacted the vendor, shared the incident details, and assisted in the repair. Currently, the incident is fully under control, no new unauthorized transfers have been detected, all affected systems are isolated, and all vulnerabilities have been patched. Each blockchain network will still need to pass multiple core verifications before resuming withdrawals.