Hackers exploited Bitget’s wallet backend, using a flaw that made fraudulent withdrawals look legitimate.