Bitget is scheduled to reopen Tether (USDT) withdrawals at 08:00 UTC on Wednesday, September 30, the third phase of a four-stage restart launched after attackers moved about $387.5 million from internet-connected wallets on September 24. The exchange had already reopened Bitcoin withdrawals on September 28 and Ether withdrawals on September 29. Bitget reported roughly 651 ETH of net inflows as of 09:00 UTC on September 29, but Bloomberg reported about $463 million in platform-wide net outflows over the 24 hours into that day. DefiLlama described the outflow as Bitget's largest since it began tracking exchange proof-of-reserves data about four years ago. Bitget's latest Proof of Reserves report, based on a 09:00 UTC September 29 snapshot and dated September 30, 2026, showed 131% coverage across 19 assets, with every asset above 100%. That figure measures assets against customer liabilities at one point in time and does not establish the condition of the separate User Protection Fund or the exchange's ability to withstand future withdrawal pressure. The fund, which held more than $464 million when the breach was disclosed, has fallen below $200 million, according to Bloomberg, a decline of more than $264 million or over 57%. Chief Executive Officer Gracy Chen said the fund is being used to absorb the incident's financial impact and that Bitget will replenish it. Bitget said a third-party security-product vulnerability allowed attackers to obtain high-level internal credentials and inject fraudulent withdrawal commands into wallet backend systems. Cold storage and Bitget Wallet were not affected. Attribution to North Korean-linked operators remains unconfirmed, and Bitget has not published its final forensic report. The exchange says the vulnerability has been patched, no further unauthorized transfers have been detected, deposits and trading continued during the freeze, and customer balances were not altered. A formal security report was due that week.