Bitget resumed BTC withdrawals after a Sept. 25 security incident involving an unauthorized outflow of about $351.6 million from some hot wallets. The exchange said attackers exploited a vulnerability in third-party security software to obtain internal network credentials and forge withdrawal commands across multiple chains and assets, while private keys and cold wallets were unaffected. Bitget said verified losses were covered by its roughly $464 million protection fund and that user funds were unaffected. On-chain analyst ai_9684xtpa reported that 2,042.28 BTC, valued at $169 million, had moved to a Bitget hot wallet, while 3,457.72 BTC remained at an on-chain protection fund address. ETH withdrawals were scheduled to resume on Sept. 29 and USDT withdrawals on Sept. 30, with other token withdrawals, fiat and C2C services planned to resume progressively from Oct. 2. Bitget also began an independent review with Mandiant and SlowMist and said it would strengthen controls for third-party components.