Bitget says attackers exploited a third-party zero-day to steal $387.5 million and move laterally into its wallet environment.