Posted in

Bybit’s lost Ethereum went through North Korea’s washing machine?

The crypto industry has rallied behind Bybit after a hack in which North Korean hacker group Lazarus stole over $1.4 billion.

The $1.4 billion hack against Bybit wasn’t just the largest exploit in crypto history — it was a major test of the industry’s crisis management capabilities, highlighting its maturation since the collapse of FTX.

On Feb. 21, North Korea’s Lazarus Group made off with $1.4 billion in Ether and related tokens in a breach that initially sent chills throughout the entire crypto world but was quickly quelled as the industry rallied behind Bybit to manage the fallout.

Here’s a look at how the attack unfolded, how Bybit responded, and where the stolen funds are moving.

Hackers, Cybercrime, North Korea, Features, Bybit, Lazarus Group

Source: Elliptic

Feb. 21: Bybit hacked 

The Bybit hack was first spotted by onchain sleuth ZachXBT, who warned platforms and exchanges to blacklist addresses associated with the hack.

Soon thereafter, Bybit co-founder and CEO Ben Zhou confirmed the exploit and began providing updates and information on the breach.

A post-mortem from Chainalysis initially stated that Lazarus executed phishing attacks to access the exchange’s funds, but the analysis was later updated to report that the hackers gained control of a Safe developer’s computer rather than compromising Bybit’s systems.

The attackers managed to “reroute” some 401,000 ETH, worth $1.14 billion at the time of the exploit, and move it through a network of intermediary wallets.

The complex network of wallets, swaps and crosschain transfers the hackers have used to obscure the funds. Source: Chainalysis

Feb. 21: Bybit assures wallets are safe, Ethena solvency 

The exchange was quick to assure users that its remaining wallets were safe, announcing just minutes after Zhou confirmed the exploit that “all other Bybit cold wallets remain fully secure. All client funds are safe, and our operations continue as usual without any disruption.”

A few hours after the hack, customer withdrawals remained open. Zhou stated in a Q&A session that the exchange had approved and processed 70% of withdrawal requests at that time. 

Decentralized finance platform Ethena told users that its yield-bearing stablecoin, USDe, was still solvent after the hack. The platform reportedly had $30 million of exposure to financial derivatives on Bybit but was able to offset losses via its reserve fund. 

Feb. 22: Crypto industry lends Bybit a helping hand, hackers blacklisted

A number of crypto exchanges reached out to help Bybit. Bitget CEO Gracy Chen announced that her exchange had lent Bybit some 40,000 ETH (around $95 million at the time).

Crypto.com CEO Kris Marszalek said he would direct his firm’s security team to offer assistance. 

Other exchanges and outfits began freezing funds connected with the hack. Tether CEO Paolo Ardoino posted on X that the firm had frozen 181,000 USDt connected with the hack. Polygon’s chief information security officer, Mudit Gupta, said the Mantle team was able to recover some $43 million in funds from the hackers. 

Related: Adam Back slams ‘EVM mis-design’ as root cause of Bybit hack

Zhou posted a thank you note on X, tagging a number of prominent crypto firms he said helped Bybit, including Bitget, Galaxy Digital, the TON Foundation and Tether. 

Hackers, Cybercrime, North Korea, Features, Bybit, Lazarus Group

Source: Ben Zhou

Bybit also announced a bounty program with a reward of up to 10% of recovered funds, placing up to $140 million up for grabs.

*********************************

If one of the paying programs on our Monitor appeals to you, please support EmilyNews by registering for it on our website. Thanks very very much!

EN web Support Chat | Hyips and Crypto questions – HyipChatEN

Telegram Chat for Crypto and Hyip reports: @HyipChatEN

*********************************

Be the first to get most important HYIP news everyday!
Simply Follow EN Facebook, EN Telegram, EN Twitter
or Subscribe to EN Feedburner and submit your email address!

If you like this article and want to support EN – please share it by using at least few of social media buttons below. Thanks and See you tomorrow!

Leave a Reply

Your email address will not be published. Required fields are marked *

join program here