The Bitget cryptocurrency exchange restored Ethereum withdrawals on Tuesday, recording a positive balance of deposits over withdrawals during the initial stage of its service recovery. The firm reported a net inflow of 651 ETH in the first hour of operation as it continues a phased restoration of accounts following a $388M security breach last week. Withdrawals for USDT are scheduled to resume on September 30, and CEO Gracy Chen noted that Tether and Circle assisted in freezing some stolen stablecoins.

The attackers used a zero-day vulnerability in a third-party security product to steal internal credentials and spoof fraudulent withdrawals, Chen said. The group ran test transfers below risk thresholds 30 minutes before draining hot wallets, though private keys and cold wallets were not compromised. While the exchange experienced $463M in net outflows after resuming Bitcoin transfers on September 28, NEAR Intents’ SHIELD system later blocked over $50M in attempts to move stolen funds.