Attackers involved in Bitget’s Sept. 24 security incident gained unauthorized access to some third-party security devices before entering the exchange’s wallet environment. Mandiant, a Google Cloud cybersecurity unit, said the attackers obtained access to warm wallets (partly connected crypto wallets) and hot wallets (internet-connected crypto wallets). The findings match the attack path Bitget had previously disclosed.