GMO Internet reported the sale, the same day Bitget's hot wallets were drained. The first unauthorized transfers took place on Sept. 25 in Tokyo, meaning the sale appears to have been reported before the theft began. Bitget was already working through the deal when the breach happened.
Ledger has asked retailers and distributors across Indonesia, Singapore, Thailand, Philippines, Vietnam, Malaysia and Hong Kong to stop selling its devices and clear stock from shelves. The October 14 request, posted on X, widens a freeze in sales that began with one reseller, CryptoBilis.
Firms that apply before the deadline can continue operating under a saving provision in the Treasury’s statutory instrument. For firms that miss the deadline, the FCA says late applications won't get priority or an accelerated review.
Bitcoin dipped below $84,000 late Tuesday shortly after, users noticed four newly created Hyperliquid wallets that shorted 148.49 BTC with 40x leverage. Lookonchain highlighted the trade on X with a caption “Insiders?” Maybe.
The attackers didn't steal private keys from Bitget’s wallets. They got into a backend system, manipulated the transaction data and then used that altered information to get Bitget’s own authorization process to approve the transfers as legitimate.