- Hackers stole 401,347 ETH worth $1.4 billion from Bybit’s Ethereum cold wallet.
- Bybit’s multisig wallet was compromised through a masked fraudulent transaction.
- Stolen funds were split into multiple wallets to evade tracking and laundering.
A major security breach has been confirmed by Bybit, a cryptocurrency exchange based in Singapore. The company lost about $1.4 billion in Ethereum (ETH) from its cold wallet. In terms of financial losses, this incident is among the biggest in the history of digital currency exchanges. According to Bybit CEO Ben Zhou, hackers effectively took control of the money by hiding a transaction that changed the smart contract’s logic, thereby taking advantage of a flaw in the multisig wallet system.
Details of the Hack
To safeguard digital assets offline, the exchange’s Ethereum cold wallet was the target of the attack. The wallet interface was altered by hackers, who then sent the wallet signers a phony-looking permission request. The outcome of this manipulation was the illegal transfer of 401,347 ETH to unidentified external addresses, coupled with large quantities of liquid staking derivatives like stETH, cmETH, and mETH. In an apparent attempt to hide the trail of stolen assets, the money was subsequently spread over other wallets.
Exchange’s Response and Market Impact
The administrator of Bybit notified users following the hack that withdrawals and other functionalities were untouched, the same as those of other cold wallets. Zhou emphasized the security of the remaining assets and confirmed that the exchange’s operations would continue as normal.
Ethereum’s market value has momentarily decreased due to the occurrence, which has considerably concerned cryptocurrency enthusiasts despite these promises. Bybit is working with cybersecurity specialists and blockchain researchers to find the stolen money and stop it from being used by other exchanges or decentralized finance platforms.
This breach underscores the persistent vulnerabilities within digital asset security frameworks and hackers’ innovative methods to exploit these systems. As Bybit navigates this challenging incident, the broader crypto market remains watchful and apprehensive about potential similar security threats.
