Giá Ben (v2)BEN

Bybit, a leading cryptocurrency exchange, recently faced a massive $1.5 billion hack, allegedly by North Korea's Lazarus Group, affecting its ether cold wallet. Total outflows hit $5.5 billion, with assets dropping from $16.9 billion to $11.2 billion. CEO Ben Zhou emphasized swift action to process withdrawals and secure funds. Key Points: - 70% of clients' ether was compromised. - Most withdrawals were stablecoins, not ether. - Safe, a custody protocol, temporarily shut down functionalities. - Bybit engaged authorities and blockchain analysis firms. Join the discussion: Should Ethereum consider a blockchain rollback? 🤔 Share your thoughts!

With not all information public, Arkham Intelligence, a blockchain analysis firm, has concluded that North Korea’s Lazarus group was responsible for the $1.46 billion hack on the Bybit exchange. On platform X, Arkham offered a bounty of 50,000 ARKM tokens, worth around $30,000, for anyone who could identify the attackers responsible for Friday’s hack. Not long after, Arkham announced that freelancer ZachXBT had provided “definite proof” that the North Korean hacking group was behind the hack. According to current information, Lazarus, North Korea’s elite state-sponsored hacking group, pulled off the largest hack in history on a centralized crypto exchange. The hack resulted in the withdrawal of Ethereum tokens amounting to around $1.5 billion. Ethereum security researchers are scrambling to investigate the incident to understand how the attack happened and whether the hack may spread to other exchanges. Within days, crypto enthusiast ZachXBT identified the Lazarus group as the likely culprit. Lazarus has been responsible for many of the top attacks on digital assets. Blockchain firm Nansen revealed that the attackers first withdrew the funds into a single wallet and then distributed them to multiple wallets. “Initially, the stolen funds were transferred to a primary wallet, which then distributed them across more than 40 wallets”, Nansen said. “The attackers converted all stETH, cmETH, and mETH to ETH before systematically transferring ETH in $27 million increments to over 10 additional wallets”. Ben Zhou, Bybit CEO, urged customers to remain calm and assured them that 80% of funds were recovered by using bridge loans to replace the stolen money. Despite the current bank run on Bybit, Zhou assured users that withdrawals would not be blocked and that customers would have access to their funds. Leveraging bridge loans allows Zhou to honour withdrawal requests. At this stage, the return of stolen tokens is highly unlikely. ZachXBT has yet to release all data pointing to the Lazarus group. He says his analysis involved tracking online connections between wallet addresses until, with the assistance of a colleague, he was able to narrow down the suspects to the North Korean hacking group. ZachXBT found a connection between the wallets used in the Bybit hack and the wallets used in the $85 million hack of Singapore-based exchange Phemex. At this stage, at least, the attack appears to be caused by Blind Signing, in which the smart contact is approved without complete knowledge of its contents. “This attack vector is quickly becoming the favorite form of cyber attack used by advanced threat actors, including North Korea”, said Blockaid’s CEO Ido Ben Natan. “It’s the same type of attack that was used in the Radiant Capital breach and the WazirX incident.” “The problem is that even with the best key management solutions, today most of the signing process is delegated to software interfaces that interact with dApps.” “This creates a critical vulnerability- it opens the door for malicious manipulation of the signing process, which is exactly what happened in this attack,” he said. The stolen funds are unlikely to be returned because North Korea does not have an extradition agreement with the United States. The North Korean hacking group was able to attain more money in this single hack than in all of its hacks last year. This hack contrasts with other previous large-scale attacks, such as the 2016 Bitfinex hack, in that the people behind this attack will likely get away with it and will most likely keep the stolen money. This shows that the American justice system is limited to countries with extradition agreements. Although America focuses on retrieving lost funds through tax, there’s not much they can do about large-scale hacks. Tom Robinson, Elliptic’s chief scientist, described the attack as the “largest crypto theft of all time.” “The next largest crypto theft would be the $611 million stolen from Poly Network in 2021. In fact it may even be the largest single theft of all time”. Bybit appears to be processing withdrawals just fine after their hack,” wrote Coinbase executive Conor Grogan. They have $20B+ in assets on the platform, and their cold wallets are untouched. “Given the isolated nature of the signing hack and how well capitalized Bybit is, I don’t expect there to be contagion.” “A minute into the FTX bankrun it was clear they had no funds to withdraw. I know everyone has PTSD but Bybit is not an FTX situation, if it was I would be screaming it out. They will be fine”. The Lazarus group’s history can be traced back to 2017 when they hacked South Korean exchanges and stole over $200 million in Bitcoin. Crypto bank robberies seem to be here to stay and will need to be a major focus within the crypto industry.

The post Biggest Crypto Hack in History: Market Crashes After Bybit Faces $1.5 Billion ETH Hack appeared first on Coinpedia Fintech News The crypto market experienced a significant downturn after Bybit, a prominent cryptocurrency exchange, announced a devastating hack involving $1.5 billion worth of cryptocurrencies. This incident marks the largest crypto hack to date. Recent updates, including statements from the CEO, confirm that Bybit was compromised, resulting in the loss of approximately $1.5 billion in Ethereum. Bybit Faces Biggest Hack in History Bybit, the Singapore-based centralized crypto exchange, appears to have been hacked. Early estimates suggest the exchange has lost over $1.46 billion worth of ETH, though the investigation is ongoing. The CEO described the hack on Bybit’s Ethereum multisig cold wallet, where attackers manipulated the signing interface to trick signers into approving a change in the wallet’s smart contract logic, allowing the theft of all ETH in that wallet. CEO Ben Zhou said, “Bybit ETH multisig cold wallet just made a transfer to our warm wallet about 1 hr ago. It appears that this specific transaction was musked, all the signers saw the musked UI which showed the correct address and the URL was from Safe. However, the signing message was to change the smart contract logic of our ETH cold wallet. This resulted Hacker took control of the specific ETH cold wallet we signed and transfered all ETH in the cold wallet to this unidentified address. Please rest assured that all other cold wallets are secure. All withdraws are NORMAL. I will keep you guys posted as more develops, If any team can help us to track the stolen fund will be appreciated.” The story will be updated.

Bybit CEO Ben Zhou confirmed in a Friday livestream that the $1.5 billion hack against his crypto exchange lost the firm the vast majority of its customers’ ETH holdings. “I believe it was around seventy percent,” Zhou told viewers, when asked how much was lost relative to the company’s ETH assets under management. “We normally keep sixty to seventy prevent in the cold wallets, and I believe this was the amount.” What Caused The Hack? The breach, first flagged by on-chain sleuth ZachXBT and other high profile accounts on Friday, saw over 400,000 Ether suspiciously leave Bybit’s cold wallet address, before rapidly being swapped its staked mETH and stETH tokens for ETH. Security experts at Cyvers told CryptoPotato that the hackers tricked those controlling the keys to Bybit’s cold wallet into signing a malicious transaction which, from the signers’ perspectives, looked honest at the time. Jack Sanford, CEO of Sherlock DeFi, had similar findings, said the transaction would have changed the rules of the multisig wallet’s smart contract to bend to the hackers’ wishes. Exact details on how the signers were fooled remain unknown. “The UI itself could have been compromised, [or] Each of these honest people could have had their actual computer compromised,” wrote Sanford. ZachXBT, a popular on-chain detective for large crypto hacks, submitted “definitive proof” on Friday that the hack was pulled off by the North Korean “Lazarus Group,” according to Arkham Intelligence. Lazarus are the most notorious hackers in the world, attacking several major crypto exchanges in the past. “TLDR myself and Josh from CF connected the Bybit hack on-chain to the Phemex hack,” said ZachXBT in response. Can Bybit Cover The Loss? Despite the seismic loss, Zhou assured followers in a tweet that all client losses remained covered by the exchange. “All client assets are 1:1 backed—we can cover the loss.” Zhou added during the stream that the exchange is reaching out to its partners in search of a “bridge loan” to support its liquidity needs as it processes “massive withdrawals” in the short term. “We actually already secured almost 80% of the Ethereum that’s been stolen as a bridge loan, to help us with the liquidity crunch.” So far, Zhou has resisted the idea of pausing exchange withdrawals. Binance co-founder Changpeng Zhao suggested that Bybit do so as a precaution – even if it spurs more fear in the market – offering his own aid if required. “1.5 billion is fear enough,” he said. “Better to be safe than sorry now.” More lightheartedly, BitMEX co-founder Arthur Hayes called on Ethereum co-founder Vitalik Buterin to “roll back the chain” to support Bybit – an action Ethereum leaders coordinated ten years ago in response to the DAO hack. The post ByBit Lost 70% Of Ethereum Holdings To Hacker, Says CEO appeared first on CryptoPotato.

🤬 Biggest hack in crypto history – Bybit lost $1.5 billion! Crypto exchange Bybit has suffered the largest hacker attack in the 15-year history of the industry. Yesterday, hackers drained $1.5 billion in Ethereum tokens, causing significant withdrawal delays. 🟡 Bybit CEO Ben Zhou announced that all withdrawals have been processed, and the system has returned to normal operation. 🟡 Users can now withdraw funds without restrictions or delays. 🟡 A full incident report and security analysis will be published in the coming days. Even though Bybit managed to restore its system, this incident sets a concerning precedent. It could lead to a loss of trust in centralized exchanges. Where do you store your crypto? 👍 — CEX 🔥 — DEX 😎 — Cold wallets