Bitget notified the third-party vendor of the zero-day vulnerability in their product