A security system flagged and halted transactions from the September 24 security breach when attackers tried to route proceeds through the NEAR Intents network. The SHIELD risk system intercepted more than $50 million in attempted transfers from the $387.5 million Bitget exploit, freezing about $503,000 mid-execution while allowing roughly $166,000 to pass through. NEAR Intents waived its share of the recovery bounty to enable the exchange to retrieve more of the stolen funds.

Bitget resumed Bitcoin withdrawals at 08:00 UTC on September 28 and restores access to Ethereum on Tuesday and USDT on Wednesday, with all other assets returning by Oct. 2. CEO Gracy Chen stated the exchange will replenish its protection fund to its $300 million baseline within a week. Meanwhile, analyst ZachXBT reported that Chinese operatives are laundering stolen funds for alleged North Korean attackers using mixing services like Wasabi and cross-chain bridges.