Cybersecurity entity
Bitget is the most frequent co-covered peer, appearing in 2 of the 2 tracked stories. The 7-day window averages about 2 stories each week. They are less corroborated than the beat average, carrying 2 original sources each against 2.5 for the same window.
Last mentioned: 9h ago
Entity pulse
Coverage balance Negative coverage leads. Negative coverage exceeds positive coverage by 100 percentage points.
Figures are computed live from our source-verified story record — see our methodology for how impact and sentiment are derived.
Bitget is the most frequent co-covered peer, appearing in 2 of the 2 tracked stories. The 7-day window averages about 2 stories each week. They are less corroborated than the beat average, carrying 2 original sources each against 2.5 for the same window. The 8 average consequence score is above the beat benchmark of 7.2 in the same window. The clearest coverage concentration is data-breach: 1 of 2 stories, with the rest divided among 1 other category. We currently track 2 Cybersecurity stories that mention SlowMist, published between September 25, 2026 and October 1, 2026.
Computed from the 2 stories linked to this entity, with beat comparisons drawn from all 28 Cybersecurity stories published in the same date window. Shares are omitted below five stories and comparisons below a twenty-story baseline.
Coverage cohort
Other entities that clear the same relevance threshold in stories also covering SlowMist. Shared-story counts are live from our verified record — not editorial picks.
Bitget discloses breach
Bitget reveals the zero-day breach and shares findings from SlowMist and Mandiant.
Bitget discloses $351.6M theft
The exchange announced the loss, suspended withdrawals, said the User Protection Fund will cover affected customers, and linked the attack to North Korean hackers based on IP behavior patterns and on-chain analysis. Law enforcement, Mandiant, and SlowMist are investigating.
Crypto theft executed
Theft transfers occurred between 02:31 and 05:23 UTC+8, spanning nearly three hours across multiple blockchains.
Unauthorized transfers detected
Bitget security systems flagged multiple unauthorized transfers from a limited number of hot and warm wallets Thursday evening. Attackers accessed the key backend wallet-service system to forge transfer information and trigger the authorization-signing process.
Privileged access to security appliances
Mandiant reports threat actor gained unauthorized privileged access to third-party security appliances A and B, deployed a web shell on appliance B, and established C2.
Additional hidden-script activity
Similar hidden-script activity was observed on two other nodes.
Earliest malicious activity
Logs show a service on one of Product A's nodes was affected by a zero-day vulnerability; attacker ran a hidden script and accessed a database password.
A zero-day in two third-party security appliances gave attackers privileged access to Bitget's wallet environment. Mandiant and SlowMist traced lateral movement to the production wallet job server, where a custom withdrawal tool moved $387.5 million.
Source: BleepingComputer · thehackernews.com
Bitget's hot and warm wallet compromise shows attackers moved beyond credential theft into backend transaction-signing infrastructure. Multi-chain impact across Ethereum, XRP Ledger, Arbitrum, and others totals $351.6M, with North Korean groups suspected. The $464M User Protection Fund covers losses, but withdrawal suspension signals ongoing containment.
Source: BleepingComputer · TechCrunch
SlowMist is linked from 2 stories on this site, each scored at or above our 35% relevance threshold — see how these pages are built.
See something wrong on this page — a misattributed entity, a wrong stat, a broken source link? Report a data issue.
