Bybit-hack: 1.5 billion US dollars stolen by Lazarus group
Bybit, a cryptocurrency exchange based in Dubai, reported a massive security incident in which an attacker Ethereum (ETH) worth $ 1.5 billion steel. In terms of damage amounts, the incident is the greatest theft in the history of the crypto industry at the time of the attack.
During a routine transfer of one Cold Wallet To a Hot Wallet the hackers managed to take control of the Cold Wallet and to transferred to an unknown address via Ethereum – a total of around $ 1.5 billion. Bybit CEO Ben Zhou insured the customers that their remaining assets are safe and that the company stays Solvent.
Details des Bybit-Hacks
The attack on Bybit was carried out during a transfer from a Cold Wallet to a Hot Wallet-a process that is carried out regularly for crypto exchanges to ensure liquidity. The hackers managed to take control of the Cold Wallet and to redirect an authorized transaction. Security expert assumethat the attackers either compromised internal access data or used a weak point in the signature management of the Cold Wallet. The stolen 401,000 Ethereum were transferred to an unknown address, which was divided into several smaller wallets shortly afterwards – a well -known tactic to make it difficult to trace.
After the hack became known, CEO Ben Zhou announced that all remaining assets were safe and the company had sufficient reserves to cover the loss. The stock exchange took up an external loan of just over a billion. The conditions of the loan have so far remained unknown. Bybit has consulted external experts to examine the incident and offers a reward of up to 10% of the re -granted amount for information that leads to recovery of the stolen funds. Despite the incident, deposits and withdrawals on the platform remain active.
Lazarus group identified as an attacker
Security analysts suspect that the North Korean hacker group Lazarus is behind the attack. In the past, this group was responsible for several large -scale cyber attacks on cryptocurrency platforms. Although these assumptions exist, the investigation is still ongoing and there is no official confirmation for the responsibility of the Lazarus Group.
The theft led to a short-term decline in the Ethereum Prize by around 4%. Bybit has announced to revise his security infrastructure to prevent future attacks and to regain the trust of the users.
