In an audacious move, hackers have hit the Singapore-based crypto exchange Bybit, orchestrating a staggering $1.4 billion heist from its Ethereum (ETH) cold wallet. This ranks among the largest breaches in crypto history, marking a seismic shift in the landscape of digital security threats.
According to Arkham, a leading crypto analysis firm, the breach involved a sophisticated manipulation of Bybit’s security protocols. The dire situation unfolded when a routine ETH transfer to a warm wallet was intercepted, with the attackers employing elaborate masking techniques. Bybit’s CEO, Ben Zhou, revealed that the multisig cold wallet intended for the transfer had been deliberately compromised. He described the breach as a scenario where all signers perceived a legitimate transfer interface, while the underlying operation altered the wallet’s smart contract logic.
Zhou shared additional insights into the breach, noting, “Bybit ETH multisig cold wallet just made a transfer to our warm wallet about 1 hour ago. It seems this particular transaction was masked. All signers observed a legitimate user interface, yet the signing message manipulated the smart contract logic, ultimately handing over control to the hackers.”
Following the breach, the hackers quickly set about moving and liquidating the stolen Ethereum assets. Blockchain forensic experts are collaborating with Bybit to trace and potentially recover the siphoned funds. The aftermath of this security lapse will undoubtedly leave an indelible mark, exceeding the impact of the infamous Mt. Gox hack of 2014, which saw $473 million disappear.
To keep informed on further developments and other major crypto news, consider subscribing to The Daily Hodl’s email alerts or follow them on social media platforms like X, Facebook, and Telegram.
Disclaimer: Remember, investments in cryptocurrency involve significant risk. Conduct comprehensive research and consult professional advice before engaging in digital asset transactions.