Safe Wallet Acknowledges Involvement in $1.5 Billion Bybit Hack
Safe Wallet confirmed its infrastructure was exploited in the $1.5 billion hack of Bybit, linked to a compromised developer machine. The attack involved a malicious transaction granting unauthorized access. Safe Wallet stated its smart contracts remained intact, with no vulnerabilities found by external researchers. The company has restored services on the Ethereum mainnet and rebuilt its infrastructure.
Key points include:
- Criticism from industry figures about Safe Wallet's vague response
- Changpeng Zhao raised questions on how the hacker accessed systems and bypassed security measures
- Analysts highlighted the attack as a classic supply chain attack, stressing vulnerabilities in user-interactive services
- Safe Wallet is enhancing security and has initiated an initiative for better transaction verifiability
- The FBI confirmed the Lazarus Group, a North Korean hacking organization, was responsible for the breach
- 40,000 ETH was stolen from Bybit's cold wallet, converted to Bitcoin, and dispersed across multiple addresses
- The FBI has listed Ethereum addresses linked to the Lazarus Group, urging service providers to block related transactions
- Concerns are growing regarding the overall security of crypto infrastructure and high-value asset management
The ongoing investigation may impact user and investor confidence in crypto platform security.
