Ben (v2) narxBEN

Blockworks' @strack_ben and @caseywagnerr will be watching the White House crypto summit even more closely after Howard Lutnick's reported comments

The hacker behind the $1.4B Bybit exploit has reportedly laundered the entire 499,000 ETH in just 10 days, using decentralized finance (DeFi) protocols to conceal their tracks. Despite intense monitoring from blockchain analytics firms, law enforcement, and exchanges, the attacker effectively dispersed the funds across numerous wallets. Bybit CEO Ben Zhou revealed that 83% of the stolen funds—around $1 billion—were converted into Bitcoin (BTC) and spread across 7,000 wallets, with 20% untraceable and 3% frozen. The hacker, believed to be linked to North Korea’s Lazarus Group, used platforms like THORChain and eXch to launder the funds, with only a small portion traced.

77% of $1.4B in hacked ETH remains traceable, Bybit CEO says Bybit CEO Ben Zhou stated on X that the recent hack resulted in the theft of 500,000 $ETH ($1.4 billion) with 77% of the stolen funds currently traceable, 20% untraceable and 3% frozen. Zhou explained that 83% of the…

Former Binance CEO Changpeng Zhao (CZ) has criticized Safe Wallet’s post-mortem update on the Bybit hack, calling it “not that great” and raising concerns about how attackers tricked multiple signers. His comments follow an audit report stating that the breach resulted from a compromise of Safe’s infrastructure rather than the exchange’s systems. Safe’s Response Forensic investigations found that compromised Safe Wallet credentials led to the nearly $1.5 billion Bybit exploit. In a statement on X on Wednesday, the crypto wallet provider confirmed the findings, stating that the hack stemmed from a “compromised Safe Wallet developer machine.” The company highlighted that the reports did not identify vulnerabilities in its smart contracts or front-end source code. It also announced that it had fully rebuilt and reconfigured its infrastructure and changed all credentials, ensuring the attack vector was “fully eliminated.” However, CZ criticized the statement, saying: “This update from Safe is not that great. It uses vague language to brush over the issues. I have more questions than answers after reading it.” He questioned what “compromising a Safe {Wallet} developer machine” meant and how the attack happened, asking whether social engineering or a virus was involved. He also inquired how the developer machine had access to an account operated by Bybit and whether the code was deployed directly to production. Further concerns were raised about how the attackers bypassed Ledger verification, whether blind signing was involved, or if signers failed to verify properly. The Report and Updates On February 26, Bybit released a forensic audit conducted by Sygnia and Verichains about the attack. The audit revealed that Safe developer’s credentials had been compromised, giving hackers access to the wallet’s infrastructure, which led to signers being deceived into approving a malicious transaction. According to the report, the exploit was carried out using “malicious JavaScript code” that had been injected into Safe’s Amazon Web Services system two days earlier. The script activated only when transactions came from specific contract addresses, including Bybit’s multi-sig contract and another address suspected to belong to the criminal. Just two minutes after the hack, the attackers removed the malicious code from Safe’s system and disappeared. Forensic experts and the company have also confirmed that Bybit’s infrastructure was not compromised. Since the incident, Bybit has borrowed 40,000 ETH from Bitget to meet withdrawal demands, which have since been repaid. The firm has also restored its reserves through loans, asset purchases, and whale deposits, securing 446,870 ETH valued at $1.23 billion. CEO Ben Zhou confirmed that the exchange now has 100% backing for client assets. The post CZ Criticizes Safe Wallet’s Post-Mortem on Bybit Hack appeared first on CryptoPotato.

🚨 The @PiCoreTeam fires back at Bybit CEO Ben Zhou’s scam accusations. They deny any ties to Bybit and clarify that the exchange never requested a KYB verification. 🔥👀 What are your thoughts on this recent development? 🤔👇