The most useful detail in the Bitget breach is what the attacker did in the first six minutes. Unauthorized transfers began at 18:31 UTC on September 24 with a 0.84 ETH test from a wallet labelled Bitget 6. Within minutes, the USDT, USDC and Tether Gold in the haul were being swapped into ether on Uniswap at prices up to 5% above spot. A thief holding roughly $67M of dollar tokens and $12.8M of tokenized gold accepted up to about $4M of slippage to avoid holding any of it for an hour. Those assets can be frozen by their issuers. Ether can’t. By the time the last transfer landed at 21:23 UTC, about 24,590 ETH sat in three previously unused wallets, and the total loss was confirmed at $351.6M.