Bybit Account Drained After 2FA Setup; Remaining 460 USDT Withdrawal Blocked

On August 23 around 23:50, I deposited 1,000 USDT into my Bybit account, then immediately enabled Google 2FA and changed my password. About 30 minutes later, I received an email that a transfer had been made—contrary to my understanding that withdrawals should be locked right after a password change—and I cannot understand how a transfer occurred without a 2FA code. When I logged back in, my balance had dropped to 500 USDT; I later saw that funds were converted from USDT to ETH and transferred, and now only 460 USDT remains. I contacted support at once and provided the requested screenshots of the transactions, but the response stated my images were from Pixpay (a Brazil exchange), not Bybit. My account was then frozen with an ETA of 5–7 business days, yet 12 days have passed and I still cannot withdraw; repeated messages receive no clear reply. I no longer ask for the stolen portion—I only want to withdraw the remaining 460 USDT—but even that request has been ignored. This was my first time using Bybit, and this security failure and handling have caused serious distress. I request urgent remediation of the security issue, immediate unfreeze and withdrawal of the 460 USDT, and a clear explanation. Contact: n***********@gmail.com**.