UPDATE: Bitget reopens BTC withdrawals after a four-day freeze, revealing attackers used a third-party security product vulnerability to obtain internal credentials and bypass risk controls moving $185M in a single minute without stealing private keys.