By: Isha Das
In a significant security breach, the popular cryptocurrency exchange ByBit has faced a major hacking incident resulting in the loss of approximately $1.5 billion worth of assets, primarily involving Ethereum (ETH). The attack, which is now being regarded as one of the largest crypto hacks in history, targeted ByBit's Ethereum multisig cold wallet. The hack occurred when an unauthorized transaction took place between the exchange's cold wallet and its warm wallet.
On February 21, ByBit confirmed the breach on social media platform X, noting that the sophisticated attack manipulated the signing interface to alter smart contract logic and permit the transfer of funds to an unidentified address. Initial on-chain data revealed that approximately 401,346.76 ETH were siphoned off, equating to nearly $1 billion in ETH alone. Further analysis by blockchain firm Lookonchain suggested the total stolen assets could sum up to around $1.5 billion, incorporating various cryptocurrencies, including staked Ethereum.
Despite the massive security setback, ByBit maintains that its operations continue as normal and ongoing investigations are underway. ByBit CEO Ben Zhou emphasized that aside from the compromised ETH cold wallet, other asset reserves, including hot and warm wallets, remain unaffected, and the exchange reassured users that withdrawal functionalities are operating regularly. The platform is actively coordinating with blockchain forensic experts to trace the stolen assets and has welcomed collaboration from experts in blockchain analytics and fund recovery.
However, the aftermath of this event has seen ByBit experiencing a surge in withdrawal requests as users respond to the breach. Concerns about platform security have no doubt played a role in this increase, and ByBit is endeavoring to fulfill customer withdrawal requests promptly. As the situation develops, the exchange is working diligently with industry partners to recover the stolen assets and strengthen security measures to prevent future incidents.