Bitget said it contained a security incident in which attackers exploited a backend wallet-approval vulnerability to move assets from hot and warm wallets without obtaining private keys or affecting its separate self-custodial Bitget Wallet. The exchange revised its estimate of assets transferred to attacker-controlled addresses to about $387.5 million, from $351.6 million and earlier estimates of $350 million, after identifying additional Zcash and TRON assets; it said the increase reflected the original incident rather than new outflows. Withdrawals, suspended after abnormal movements were detected, will reopen in stages from Sept. 28 at 8:00 a.m. UTC, beginning with Bitcoin, followed by Ethereum on Sept. 29, USDT on Sept. 30, and other tokens, fiat currencies and P2P services on Oct. 2 if inspections are complete. Bitget said trading and deposits remain operational, user balances were unaffected, and its user protection fund will cover financial losses, while Mandiant, SlowMist, Binance, blockchain analysts and law enforcement support tracing and recovery efforts.