Bybit Suffers Historic $1.5 Billion Crypto Heist, Marking Largest Theft Ever

Hacker hacking ByBit

Image: CoinTelegraph

The Biggest Crypto Heist to Date

The era of high-tech financial crime reached a new peak as Bybit, one of the world’s leading cryptocurrency exchanges, was hacked for nearly $1.5 billion in Ethereum. This incident marks the largest cryptocurrency theft in history and potentially the most significant heist of any kind, according to blockchain security experts.

Bybit CEO Ben Zhou confirmed on X that a hacker gained access to one of the exchange’s cold wallets—an offline storage method meant to protect assets from cyberattacks. Zhou explained that the hacker manipulated a signing message to alter the smart contract logic of Bybit’s ETH cold wallet, ultimately rerouting the funds to an unidentified address.

“This was a direct attack on one of our cold wallets, and the hacker managed to drain all ETH from it,” Zhou stated. Despite the gravity of the situation, he reassured users that all other cold wallets remained secure and that withdrawals were operating as usual.

Breaking Records in Crypto Theft

The Bybit heist surpasses all previous cryptocurrency thefts, including:

  • The Ronin Network attack in 2022, which saw hackers steal $620 million.
  • The Poly Network breach in 2021, leading to a loss of $610 million.
  • The infamous Mt. Gox hack of 2011, where 850,000 Bitcoins (valued at around $450 million at the time) were stolen—a sum that would be worth over $81 billion today.

While the Mt. Gox hack remains the most valuable in retrospect, the sheer amount stolen from Bybit makes it the largest single theft in cryptocurrency history.

Market Reaction and Recovery Efforts

Following the breach, Bybit saw a sharp reaction in the crypto markets. Ethereum dropped by as much as 6.7% from its daily high, while Bitcoin also dipped by about 3%.

Despite the setback, Bybit has already secured around 80% of the necessary funds to cover losses through partner bridge loans. Zhou reassured users via livestream that “Your money is safe, and our withdrawals are still open.”

Meanwhile, Bybit has actively sought assistance from the blockchain security community. In a public post, the exchange invited experts in blockchain analytics and fund recovery to help trace the stolen assets. Several sources have stated that the Lazarus Group of North Korea is behind this attack, which is consistent with their culpability in previous major cryptocurrency hacks. It is believed that the Lazarus Group helps fund North Korea’s pariah state in this illicit manner.

The Future of Crypto Security

As the cryptocurrency industry continues to evolve, security remains a major concern. This incident highlights the vulnerabilities even top-tier exchanges face, emphasizing the need for enhanced security measures.

For now, Bybit is working tirelessly to recover from the attack while assuring users that the exchange remains financially stable. However, the scale of this hack serves as a stark reminder that even offline wallets are not immune to increasingly sophisticated cyber threats.