Is This The Biggest Hack In History?

Bybit, a crypto currency firm based in Duabai, has disclosed that hackers stole $1.5bn (£1.1bn) of digital currency -  probably the biggest known cryptocurrency theft in history. 

An attacker allegedly gained control of an Ethereum 'cold wallet' and transferred around $1.5bn worth of holdings to an unidentified address. 

The company says the incident has led to a “surge” in withdrawal requests, but that withdrawals have not been halted and all other wallets remain secure. 

Bybit holds a total  $20bn (£15bn) in assets.Bybit's founder Ben Zhou told Bybit users that their funds were "safe" and that if would refund any of those affected.  “As far as we know this could be the largest hack in the history of our industry,” Zhou said. It is understood that Bybit is getting a loan from its partners that will allow it to refund  uses for any digital currenvy that it could not recover. Zhou said there had been a rush to withdraw from the exchange but the pace of withdrawals had slowed. 

"Bybit is solvent even if this hack loss is not recovered, all of clients assets are 1 to 1 backed, we can cover the loss," Mr Zhou said.

Hackers somehow gained access to digital wallet containing Ethereum, the second largest crypto currency by value after Bitcoin. Bybit said the hackers exploited security features, then transferred the money to an unidentified address. After the theft, the value of Ethereum fell by around 4%.

The scale of the theft would exceed a previous record, which was a $620m (£490m) theft of Ethereum and USD Coin from the Ronin Network in 2022.

Bybit was founded in 2018 and  US President Donald Trump and former Paypal chief Peter Thiel were reportedly amongst its early investors. Bybit says it has more than 60 million users worldwide and offers access to various cryptocurrencies. The firm has said in an X post that it had reported the case to authorities and that it was working "quickly and extensively" to identify the hackers.

Research group Arkham Intelligence said in a post on X that it had tracked $1.36bn of Ethereum leaving Bybit for multiple other accounts where it was rapidly being sold.

Cryptocurrencies, which have become popular with investors, have sparked division as many criticise their value for being based purely on speculation, allowing their value to be easily manipulated and this mst recent event highlights security concerns within the digital currency market, 

In 2014, crypto exchange Mt. Gox went bankrupt after $350m (£210m) of digital currency was stolen due to a defect in its security, while in 2019, hackers stole $41m in cryptocurrency from the Binance crypto exchange.

@Bybit   |   @Bybit   |   BBC   |   FT   |   Gulf Business   |   National News     

Image:  @Bybit

You Might Also Read: 

The End Of Crypto Currency:


If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Apple Removes Data Protection For Users In Britain

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Imperva

Imperva

Imperva is a leading provider of data and application security solutions including DDoS protection, Web application security, Data security and Cloud security.

Fredda Stanza

Fredda Stanza

Fredda Stanza specialize in Information Security and Forensics Consulting.

Repository of Industrial Security Incidents (RISI)

Repository of Industrial Security Incidents (RISI)

RISI is a database of cyber security incidents that have (or could have) affected process control, industrial automation or SCADA systems.

Bounga Informatics

Bounga Informatics

Bounga Informatics provides Digital Forensics, E-Discovery, and Endpoint Security software, hardware, and training in Singapore and other countries in Asia Pacific.

ERMProtect

ERMProtect

ERMProtect is a leading Information Security & Training Company that helps businesses improve their cybersecurity posture and comply with regulations.

Tenfold Software

Tenfold Software

Tenfold is the unique, centralized platform for managing user and permissions efficiently and automatically.

APT Search

APT Search

APT Search is a recruitment company specialising within the Legal Technology, Cybersecurity and Privacy sectors.

EvoNexus

EvoNexus

EvoNexus is a technology startup incubator with locations in San Diego, Orange County, and Silicon Valley.

Rizikon Assurance

Rizikon Assurance

Rizikon Assurance is an Online System that improves Third-Party Assurance and Risk Management, through efficiency, automation and better visibility.

Expel

Expel

Expel provide transparent managed security services, 24x7 detection, response and resilience.

InfoSec Conferences

InfoSec Conferences

InfoSec Conferences is an online directory of infosec conferences. We list every single Information Security conference, event and seminar within every niche in Cybersecurity.

CIBR Warriors

CIBR Warriors

CIBR Warriors are a leading cyber security and networking staffing company that provides workforce solutions with businesses nationwide in the USA.

3i Infotech

3i Infotech

3i Infotech offers consulting & professional services to assess, design and build next gen IT infrastructure, and managed services to operate, optimize and continuously improve.

Chartered Institute of Information Security (CIISec)

Chartered Institute of Information Security (CIISec)

CIISec is dedicated to helping individuals and organisations develop capability and competency in cyber security.

Astute Technology Management

Astute Technology Management

Astute Technology Management helps businesses take control of their technology and work with greater confidence.

SureCloud Cyber Services

SureCloud Cyber Services

Our Cyber Testing capability has been honed since we were founded in 2006 as a disrupter in the penetration testing market.