Bybit, the third exchange of market crypto, has just been hacked on Friday for nearly $ 1.5 billion from Ethereum.
Onchain’s activity shows that the pirate sold the stolen funds during the last hour.
“Please, rest assured that all the other cold wallets are secure. All withdrawals are normal, ”said Ben Zhou, CEO of Bybit.
The pirate had access to Ether in the cold exchange portfolio – a secure and offline storage device for the maintenance of cryptocurrencies – and sent funds to an unidentified address.
“The bybit Cold Multisig portfolio was compromised by a misleading transaction that led the signatories to approve without knowing it a change in malicious malicious contract,” said Meir Dolev, co-founder and CTO of Cywers, said DL News.
In a later declaration, Zhou said: “Parbit is a solvent even if this loss of piracy is not recovered. All customers’ assets are supported from 1 to 1. We can cover the loss.
The hot wallet by balance sheet, the hot wallet and all the other cold wallets are good. The only cold wallet that was hacked was Eth Cold Wallet. All withdrawals are normal.
– Ben Zhou (@benbybit) February 21, 2025
Before the piracy of Bybit today, the largest hacking in the cryptographic industry was the feat of Ronin Network on March 23, 2022, which led to a loss of $ 600 million.
Bybit did not immediately respond to requests for additional comments.
‘It will happen again and again’
Taylor Monahan, the principal security researcher of the crypto Wallet Metamask, warned that the threat that had dropped was the same as that of many other high -level attacks.
“No one is prepared for the attack vector,” she said DL News. “This will happen again and again.”
Monahan underlined the attacks on the exchange of crypto in Wazirx India, the decentralized autonomous organization Radiant Capital and the Crypto Exchange based in Japan DMM Bitcoin, followed a similar model.
Wazirx was hacked for 235 million dollars in July 2024, Radiant was hacked for $ 50 million in October 2024 and DMM Bitcoin was reported by $ 308 million in December 2024.
In each case, the attackers could bypass the security measures to replement a version of the crypto portfolio of each project, but the portfolio interface appeared in the original owners.
“You can’t see it,” said Monahan. “He fucks the fucking front.”
Liam Kelly is a journalist based in Berlin DL News. Do you have a tip? Send him an email to liam@dlnews.com.