The breach, which occurred on February 21, is considered one of the largest in recent crypto history. Attackers exploited a transfer between Bybit’s cold wallet (offline storage) and its warm wallet used for daily transactions, siphoning off roughly 401,000 ETH to an unknown address. Investigations suggest the notorious North Korean Lazarus Group may be behind the exploit.
In response to the hack, Bybit CEO Ben Zhou reassured users that the platform remains financially stable and that unaffected wallets continue to function normally. Zhou confirmed that the company has acted rapidly to secure client assets, and that withdrawal services have returned to normal. The exchange’s decisive measures prevented a major liquidity crisis, despite the broader industry seeing a 21% increase in crypto thefts in 2024, with North Korean-linked hackers responsible for a significant share of losses.
Bybit’s quick recovery highlights its commitment to safeguarding user funds and addressing security vulnerabilities head-on. As the investigation continues and law enforcement agencies work to recover the stolen funds, industry observers note that the incident underscores the ongoing risks within the crypto ecosystem.