Real-time tracking of Bybit attack

Real-time tracking of Bybit attack

Bybit suffered a security incident, and funds worth $1.44 billion were withdrawn. A North Korean hacker group was accused of being the perpetrator.

64 articles
2025-03-01 01:06
Bybit hackers laundered 14,300 ETH in the past 24 hours, worth about $32.2 million
According to on-chain analyst Ember, the Bybit hacker has suspended the transfer and washing of ETH since 3 pm yesterday, so only 14,300 ETH (US$32.2 million) were washed away in the past 24 hours. There are still 218,000 ETH (US$486.6 million) in the hacker's address.
2025-02-25 12:04
Bybit bought another 36,893 ETH through OTC 3 hours ago
Bybit purchased another 36,893 ETH ($87.5 million) through OTC 3 hours ago. In addition, Bybit has purchased a total of 212,101 ETH ($574 million) through OTC in the past 3 days.
2025-02-25 03:52
Chainflip: Protocol upgrade to stop Bybit hacker funds flow
Chainflip officially announced that after discussions with the team, community, liquidity providers, major interfaces using Chainflip, and most validator providers, it decided to prevent the illegal flow of Bybit hacker funds within the protocol through a protocol upgrade.
2025-02-25 01:33
Bybit hackers have laundered 89,500 ETH through THORChain, and it is expected that all of them will be exchanged for other assets in half a month
According to Ember’s monitoring, the Bybit hacker has laundered 89,500 ETH (US$224 million) in the past two and a half days, which is 18% of the total amount of ETH he stole (499,000).
2025-02-24 06:47
Bybit: mETH Protocol team successfully recovered 15,000 cmETH tokens worth approximately $43 million
Bybit tweeted that the mETH Protocol team provided crucial assistance in the recent security incident. Through quick action and effective coordination, the mETH Protocol team successfully recovered 15,000 cmETH tokens, worth approximately $43 million.
2025-02-24 03:33
After the Bybit hack, how can DeFi effectively cope with market turmoil?
This article will delve into the impact of this attack on Aave, Ethena, and USDe, analyze how the DeFi system responded to this incident, and explore whether Proof of Reserves can prevent liquidations of more than $20 million.
2025-02-24 03:30
Bybit CEO: ETH gap has been fully filled
Bybit CEO stated that Bybit has fully filled the ETH gap and a new audited POR (Proof of Reserves) report will be released soon.
2025-02-24 03:06
Bybit has acquired approximately 446,870 ETH worth approximately $1.23 billion through loans, whale deposits, and purchases
According to Lookonchain monitoring, since the hack, Bybit has obtained about 446,870 ETH (US$1.23 billion) through loans, whale deposits and ETH purchases. Currently, Bybit is close to making up for the funding gap caused by the hack.
2025-02-24 02:00
The biggest hacker incident in the history of Web3, we witnessed the greatest unity
Faced with such a large amount of money, people realized that this was not only the largest hacker attack in the history of Web3 blockchain so far, but also an industry crisis.
2025-02-24 01:53
Bybit bought 266,694 ETH worth about $742 million after being suspected of being hacked
According to Lookonchain monitoring, Bybit has purchased 266,694 ETH ($742 million) after being suspected of being hacked.
2025-02-24 01:42
Bybit hacker has sold 50,700 ETH, Bybit is suspected to have bought 157,600 ETH in the past two days
According to on-chain analyst Yu Jin, the Bybit hacker has sold 50,700 ETH (US$142 million) in exchange for DAI and other on-chain assets (BTC, etc.), and currently holds 448,600 ETH (US$1.26 billion). In addition, an address suspected to belong to Bybit or its affiliates (0x2E4...b77) bought a total of 157,600 ETH (US$441 million) through three brokers, Galaxy Digital, FalconX, and Wintermute, in the past two days and then transferred them to Bybit.
2025-02-24 01:15
Bybit Releases API for Suspicious Wallets on “Blacklist”
According to the official announcement, Bybit has launched a new API to update the blacklist of suspicious wallet addresses found so far. The API will simplify and speed up the recovery of compromised funds. Bybit will continuously update this list to ensure that network defenders and security partners can effectively intercept fraudulent activities. Successful interceptions will receive a 10% reward to strengthen its commitment to the security of the entire industry.
2025-02-24 00:10
eXch Exchange Denies Allegations of Helping Lazarus Group Hackers Launder Money
Non-KYC centralized exchange eXch denied allegations that it laundered money on behalf of the Lazarus Group in a forum post. “To hold a contrary opinion is simply the opinion of some who wish the fungibility and on-chain privacy of decentralized currencies to go away… These people have long hated decentralized cryptocurrencies.”
2025-02-24 00:02
Bybit: With the assistance of multiple parties, $42.89 million of stolen funds have been successfully frozen
Bybit tweeted that through the coordinated efforts of multiple parties, it successfully froze $42.89 million of stolen funds in one day. The institutions that provided assistance included Tether, THORChain, ChangeNOW, FixedFloat, Avalanche Ecosystem, CoinEx, Bitget, Circle, etc.
2025-02-23 05:42
Bybit CEO: I hope eXch will reconsider blocking capital outflows, which will not only help Bybit
Bybit CEO Ben Zhou tweeted, “At this moment, it’s not about Bybit or any entity, but our general attitude towards hackers as an industry. I sincerely hope that eXch can reconsider and help us stop the outflow of funds. We have also received help from Interpool and international regulators. Helping to stop these funds is not just helping Bybit.” Previously, eXch publicly released Bybit’s interception request email and refused to respond.
2025-02-23 05:32
SlowMist Yuxian: All platforms should improve their risk control level to deal with the outflow of money laundering funds from eXch
Yu Xian, the founder of SlowMist, tweeted that given that a large amount of ETH has been washed out through eXch and exchanged for BTC XMR, etc., all platforms should increase their risk control levels for funds coming from eXch.
2025-02-23 04:04
Ethereum core developer explains why it is impossible to "roll back" the Ethereum blockchain
After Bybit was hacked, some people asked why Ethereum could not "roll back" the blockchain to reverse the hacker attack. In response, Ethereum core developer timbeiko.eth published an article to explain that while Bitcoin was able to "roll back" its blockchain 15 years ago, today, the interconnected nature of Ethereum and the settlement of on-chain <> off-chain economic transactions make this problem difficult today.
2025-02-23 00:48
Bybit CEO: Rolling back the Ethereum blockchain to before the theft may be decided by the community vote
Bybit CEO Ben Zhou was asked in Spaces on February 22 whether he supports rolling back the Ethereum blockchain to the state before the Lazarus Group hack on February 21. He responded: “I’m not sure if this is a decision made by one person. Based on the spirit of blockchain, maybe this should be a voting process to see what the community wants, but I’m not sure.”
2025-02-22 09:47
BitJungle: Uncovering the world’s largest hacker theft case at Bybit Exchange, involving nearly $1.5 billion
On the evening of February 21, 2025 (Beijing time), Bybit exchange was attacked by APT, forging "blind signatures" to break through the multi-signature mechanism, resulting in the theft of nearly $1.5 billion in assets from cold wallets. As of 8 a.m. on the 22nd (Beijing time), the stolen assets were distributed in 51 addresses.
2025-02-22 08:49
Chainflip: We have tried our best to stop the Bybit hacker and shut down some front-end services, but we cannot completely block, freeze or redirect any funds
Chainflip, a cross-chain bridge, responded to the request of Bybit CEO on the X platform. It said: We have tried our best to deal with it, but as a decentralized protocol, we cannot completely block, freeze or redirect any funds. However, some front-end services have been closed to prevent the flow of funds.