Bybit Hack Caused By Malicious Code In Safe Wallet’s Infrastructure: Report
Highlights
- Bybit’s initial investigation into its hack points to a vulnerability from Safe Wallet.
- The report says Bybit infrastructure remains uncompromised in the wake of the attack.
- Concerted efforts are underway to recover stolen assets from the North Korean hacking syndicate.
Early reports point to a third-party vulnerability as Bybit tries to find the remote and immediate causes of its security breach. While the interim investigation has absolved the exchange of blame, experts say the hack may be mitigated with watertight guardrails.
Safe Wallet Vulnerability Triggered Bybit Hack
As Bybit reels from its jarring $1.5 billion hack, the company enlisted Web 3 security outfit Verichains and Sygnia Labs to investigate the breach. Company CEO Ben Zhou took to X to share the results of the interim investigation report, pointing to Safe Wallet as the source of the Bybit hack.
Per the document, the root cause of the Bybit hack from malicious code in the wallet’s infrastructure. Bad actors replaced the original JavaScript file of the app.safe.global with compromised code to target Bybit’s Ethereum Multisig Cold Wallet.
Preliminary investigations say the attack on the top exchange was scheduled to hit during the next Bybit transaction. Both Verichains and Sygnia Labs’ analysts say Safe Global AWS S3 and CloudFront accounts were likely targets for hackers.
The report cites Wayback Archives as proof of a “cached malicious file” given Google Search’s integrations of the service. Safe Wallet’s official statement also confirms the origin of the breach, pointing to a compromised Safe developer machine.
“Bybit remains steadfast in our commitment to security and transparency,” said Zhou. “The preliminary forensic review finds that our system was not compromised.”
A Concerted Effort Underway To Recover Funds And Protect Customers
In the hours following the attack, Bybit transferred the funds from its Safe Wallet to limit its damage. The exchange has frozen $42 million worth of stolen funds from attackers in a collaborative effort by industry players.
Zhou has announced a bounty hunt designed to stifle the Lazarus Group’s ability to cash out from the attack. A positive development confirms that the firm has acquired 100% of Ethereum lost in the hack via a raft of loans and OTC deals from industry giants like Galaxy Digital and Wintermute.
- Insider Whale Opens $255M Bitcoin Longs as Trump Confirms Oct 31 Meeting With China
- Data Shows Bitcoin Short Squeeze Likely With Speculation of “Bullish” US CPI
- John Bollinger Sees ‘W’ Bottom Forming in Ethereum and Solana, Not Bitcoin
- Robert Kiyosaki Calls Bitcoin and Ethereum ‘Real Money,’ Urges Investors to Ditch ‘Fake’ Fiat
- ‘Sell Gold, Buy Bitcoin’: Expert Flags Major Market Bottom Signal
- Solana Price Prediction: Analyst Notes Bearish Breakdown Amid Derivatives Slowdown
- Shiba Inu Price Eyes Recovery as Burn Rate Jumps 10,785% – Can SHIB Hit $0.000016?
- Ethereum (ETH) Price Prediction: Analyst Eyes $7,000 by Q4 as Bitmine Accumulates $281M ETH — Will History Repeat Itself?
- HYPE Price Teeters Amid Weak Technicals and Soaring Liquidations
- XRP Price Prediction As Ripple Announces $1B Treasury Plans – Is a Rebound Imminent?
- Bitcoin Price Prediction Amid Gold’s Parabolic Rally to Second-Largest Reserve Asset
Why Trust CoinGape
CoinGape has covered the cryptocurrency industry since 2017, aiming to provide informative insights Read more…to our readers. Our journal analysts bring years of experience in market analysis and blockchain technology to ensure factual accuracy and balanced reporting. By following our Editorial Policy, our writers verify every source, fact-check each story, rely on reputable sources, and attribute quotes and media correctly. We also follow a rigorous Review Methodology when evaluating exchanges and tools. From emerging blockchain projects and coin launches to industry events and technical developments, we cover all facets of the digital asset space with unwavering commitment to timely, relevant information.
