The cryptocurrency industry has been rocked by one of the most significant security breaches in its history. Hackers have stolen approximately $1.5 billion in digital assets from Bybit, marking the largest theft the sector has ever seen.
Bybit CEO Ben Zhou confirmed the attack in a post on X (formerly Twitter), revealing that Ethereum (ETH) coins were siphoned from the exchange’s cold wallet. Cold wallets, typically considered more secure than online hot wallets, require multiple signers to authorize transactions, making this breach particularly alarming.
Bybit ETH multisig cold wallet just made a transfer to our warm wallet about 1 hr ago. It appears that this specific transaction was musked, all the signers saw the musked UI which showed the correct address and the URL was from @safe . However the signing message was to change…
— Ben Zhou (@benbybit) February 21, 2025
“As far as we know, this could be the largest hack in the history of our industry,” Zhou stated during a live-stream update. While an initial wave of panic-driven withdrawals surged following the revelation, Zhou assured users that Bybit was securing a bridge loan from its partners to reimburse affected customers.
A Blow to Crypto’s Resurgence
The heist comes at a critical time for the cryptocurrency sector, which has experienced renewed optimism due to expectations of a more crypto-friendly stance from the potential re-election of Donald Trump. However, this attack underscores persistent security vulnerabilities that continue to plague the industry.
Historically, major crypto exchanges have suffered similar large-scale breaches. In 2011, Mt. Gox lost 25,000 BTC, valued at $470 million at the time, while Binance fell victim to a $570 million exploit in 2022 due to a smart contract flaw. Bybit’s loss surpasses both incidents, raising concerns over the safety of even the most secure storage methods.
The Investigation and Aftermath
Blockchain analytics firm Arkham Intelligence has traced $1.36 billion worth of stolen ETH moving across multiple accounts, where it is being rapidly liquidated. Authorities and cybersecurity experts are now investigating how hackers bypassed Bybit’s multi-signature security measures.
Despite assurances of reimbursement, the attack is a stark reminder of the vulnerabilities in crypto exchanges. As digital assets gain mainstream traction, security remains a pressing concern for investors and regulators alike.
The industry now awaits Bybit’s next steps and whether this unprecedented theft will trigger further regulatory scrutiny on crypto exchanges worldwide.
Disclaimer: The information in this article is for general purposes only and does not constitute financial advice. The author’s views are personal and may not reflect the views of Chain Affairs. Before making any investment decisions, you should always conduct your own research. Chain Affairs is not responsible for any financial losses.