Bitget Hack, Duelbits, ColdCard, Haruko, Liquid - Time to change?

[Italian Panic]

In the last few hours, hacks have taken place at the Duelbits online casino and the Bitget exchange, on two different scales: the first for 7 milion dollars and the second for the staggering sum of 351 million dollars.

In the past weeks was time for: Coldacard, Haruko, Liquid and much more. Many of these are linked to attacks involving AI agents; over the past 19 months, a total of 3.63 billion dollars has been stolen from the crypto ecosystem, and with today’s Bitget hack, the total has surpassed 4 billion.

Perhaps the time has come to change our mindset regarding online security, to do away with old cliches, and to demand security, privacy, and anonymity. Internet must be freed.

(Thanks to oll) Bitget hack: https://bitcointalk.org/index.php?topic=5595028.msg67177125#msg67177125

[oll]

It appears that, in the last few minutes, there has been an incident involving a hot wallet on the Bitget exchange, and around 170 million dollars have been stolen. The latest reports suggest the figure may be even higher; this is certainly a significant blow for the exchange.

Sorry, but similar topic is already created:
https://bitcointalk.org/index.php?topic=5595020.msg67176830#msg67176830

[EluguHcman]

It appears that, in the last few minutes, there has been an incident involving a hot wallet on the Bitget exchange, and around 170 million dollars have been stolen. The latest reports suggest the figure may be even higher; this is certainly a significant blow for the exchange.

I can only imagine that this news can be true because, hot wallets being connected to online has it vulnerable risks for the platforms server to be hackable.
Even you as the user of the platform, your private keys are still stored online and controlled by the same authorities whose security server is weak enough to be hacked. Else. I expected this discussion to be backed with link to source of the information and then, we can strictly talk about the event the exchange itself .

Bitget I know is one of the most wide used exchange and had just shown itself of how vulnerable the hot wallets could be.
If hackers don't have you particularly on targets, they can pass the server to get necessary datas of you that can lead them access to your address or privacy just to steal tiu funds.

[hugeblack]

I fear such attacks could lead to the abandonment of privacy and a crackdown on any service that makes tracking currencies more difficult; ultimately, users tend to be complacent, and regulators will view this as a golden opportunity to shut down decentralized systems and mandate widespread KYC compliance.

[Italian Panic]

It appears that the attackers did not compromise any private keys, but rather compromised a third party tool that had access to a backend with high level permissions. Thanks to this access, they forged Bitget’s internal documentation and used digital signatures recognised as valid by Bitget’s internal systems, thereby ordering fund transfers.
The attackers proved to be very clever, as they stole various types of funds and sent them to multiple blockchains simultaneously, effectively slowing down Bitget’s defence system, which would have had to act on several blockchains at the same time.