BitMEX says that a closer look at the script revealed an ‘operational security mistake’ that may have revealed an attacker's ‘original IP address.’