oracle exploit · X 热门 · 2026-09-25 16:45 UTC

# oracle exploit — X 热门讨论 (2026-09-25 16:45 UTC)

## @EthanElvberg (Ethan / 6529) · 09-25 16:38 · ♥131 ↻0 💬19 from what oracle digged out the bitget situation was not a smart contract exploit.

multiple hot and cold wallets signed normal transfers and moved funds into fresh wallets across several chains. the blockchain did exactly what it was told to do. the failure was likely higher up: custody infrastructure, signer access, the mpc approval system, the withdrawal backend, or someone with internal authority.

the exact entry point is still unknown, but the damage could have been limited with isolated signers, destination allowlists, strict outflow caps, withdrawal cooldowns, independent approval quorums and automatic velocity checks across every chain.

cold wallets should also never share the same control path as hot wallets.

if multiple wallets suddenly start sending millions to one fresh address across six chains, the entire signing system should automatically freeze before the second transfer not keep going until more funds are drained. https://x.com/EthanElvberg/status/2103524463358722216