$387.5M walked out. No private key was stolen.
Twenty-five days inside, unseen. A zero-day in a third-party security product opened the door; a database password stored in an environment variable did the rest. The attackers moved laterally into the wallet infrastructure, spoofed transaction data in the backend, and Bitget's own system authorized and signed. The signatures were valid: the system signed whatever it was told.
How Shield breaks the chain. Orders signed at origin with ML-DSA, an integrity ledger that re-checks every custody record, channels that need an ML-KEM identity, and on-chain monitoring that pauses abnormal outflows. Verify before you sign.