Chainalysis reveals how Bybit hackers stole $1.4 billion in crypto

Key Points

  • Bybit suffered a major exploit on Feb. 21, losing $1.46 billion in Ether and other tokens.
  • The attack was carried out by the North Korea-linked Lazarus Group using social engineering and complex laundering techniques.
  • Chainalysis detailed the hack's progression, highlighting the use of phishing and unauthorized fund transfers.
  • The stolen funds were moved through multiple intermediary wallets and converted into other cryptocurrencies to obscure the transaction trail.
  • Collaborative efforts have led to freezing $40 million of the stolen funds.

Summary

On February 21, cryptocurrency exchange Bybit was hit with what has been described as the largest exchange hack in history, losing $1.46 billion in Ether and other tokens. The attack was attributed to the North Korea-linked Lazarus Group, known for employing sophisticated social engineering and laundering tactics. Chainalysis, a blockchain analysis firm, provided a detailed account of the hack, revealing that it began with a phishing campaign targeting Bybit's cold wallet signers. The hackers managed to replace a multisignature wallet contract with a malicious version, enabling unauthorized fund transfers. They intercepted and rerouted a significant amount of ETH to their addresses, then dispersed the funds across multiple wallets to obscure the transaction trail. The stolen assets were converted into other cryptocurrencies like Bitcoin and Dai, using various methods to move them across different blockchain networks. Despite these efforts, Chainalysis, in collaboration with the crypto community, has managed to freeze $40 million of the stolen funds, emphasizing the need for enhanced security measures and transparency in user fund protection within the crypto industry.

cointelegraph
February 25, 2025
Crypto
Read article

Related news