The Bangladesh hack was unable to be reversed because the attackers exploited holidays in multiple countries to create a multi-day window where they could be reasonably sure that people wouldn't be auditing the transaction.

And of that hack, I think something like 90% of the transactions for stolen money were reversed, but a significant portion got through because of the timing.

edit- and IIRC the whole thing was caught because of a typo?