Attackers exploited a third-party zero-day vulnerability to access Bitget's internal management system