Bitget's attacker ran two small test transfers half an hour before draining $388 million, CEO Gracy Chen says.