Bitget’s $387.5 million security incident involved a compromise of the transaction-signing trust chain rather than a private-key leak, GoPlus Security said. Transaction-signing controls govern how blockchain transactions are approved, making the finding distinct from direct theft of cryptographic keys.