The StatCounter analytics service was compromised on November 3, 2018 and weaponized to target Gate.io users. Attackers injected malicious JavaScript that specifically targeted the Bitcoin withdrawal page (myaccount/withdraw/BTC), replacing withdrawal addresses with attacker-controlled wallets. The script automatically submitted forms when amounts exceeded 10 BTC or the user's daily limit.