Krypto Heist on an Unprecedented Scale

Last Friday, news of a crypto heist startled investors. The cryptocurrency exchange Bybit announced, that an attacker had gained control of an ether wallet and transferred holdings worth around 1.5 billion dollars to an unidentified address.

The hack took place during the transfer of digital currency units from a «cold wallet», a wallet held offline for storage purposes, to a «warm wallet» for trading purposes, according to a post by the company.

This is typically a routine process. However, the attackers discovered and exploited a security vulnerability. They managed to forge an authorized address for the transaction signatories, allowing them to secretly change the destination to an unknown address during the signing process.

Customer Funds Safe - Bybit Solvent

The Ether-Cold wallet was the only one that was attacked. None of the exchange's other wallets were compromised. Bybit-CEO Ben Zhou reassured users that customer withdrawals would continue to function normally.

«All customer funds are safe and our operations are continuing as usual without interruption,» the company said. The security team would investigate the incident together with forensic experts.

«Bybit is solvent even if this hack loss is not recovered, all customer assets are secured 1 to 1, we can cover the loss,» Zhou said.

More than 60 Million Users Globally

Bybit has more than 60 million users worldwide and offers access to various cryptocurrencies, including Bitcoin and Ether. The company is based in Dubai and recently managed cryptocurrencies worth more than 16 billion dollars. According to «CoinMarketCap», this value has now fallen to less than 12 billion dollars. In comparison: Binance has a value of 152 billion dollars.

The Ronin Network hack was previously considered the largest crypto heist. In 2022, hackers stole digital assets worth $624 million. In 2024, an estimated $2.2 billion in cryptocurrency was stolen worldwide.

Also on Friday, the US crypto exchange Coinbase announced that the SEC would discontinue its investigation into the company. The regulatory authority has announced the review of a number of proceedings. President Donald Trump had nominated Paul Atkins as the new head of the SEC, who is considered a crypto advocate.