According to CoinMeta, the SlowMist security team has disclosed the interim investigation results of the hot wallet asset theft incident that occurred on September 25th with the identifier Bitget. The investigation found that the attack involved some third-party security products and wallet application hosts. One of these third-party products had a zero-day vulnerability, and the attackers also used the identities of internal employees to access the third-party product management platform without authorization. SlowMist stated that the team has obtained the custom withdrawal tools used by the attackers to interact with the wallet system's withdrawal logic. The online attack began at 2:31 am on September 25th and lasted for about 2 hours and 52 minutes, involving multiple blockchains. Afterwards, the attackers also attempted to tamper with the withdrawal records and trigger additional withdrawals with the identifier BTC. The team is still investigating how the attackers were able to move laterally between the affected systems.