A March 2024 software glitch enabled customers to withdraw or transfer tens of millions of dollars they did not own over several hours before controls were restored, with the bank subsequently pursuing recovery from thousands of mostly student customers and prompting concerns about authentication and transactionmonitoring controls.