The $1.4 billion hack of Bybit conducted by the Lazarus Group has sparked discussions in the crypto community. Safe{Wallet} released a report on the incident, but former Binance CEO Changpeng Zhao questioned its completeness and accuracy.
Safe’s Report: What It Says
According to Safe's report, the attack was executed through a compromised developer machine, allowing hackers to inject malicious code into Safe's AWS infrastructure. The report claims there were no vulnerabilities in Safe's smart contracts or frontend services.
CZ’s Criticism: More Questions Than Answers
Changpeng Zhao stated that the Safe report leaves many questions unanswered. These include how hackers gained access to the developer's machine, how this machine had access to Bybit's account, and how the Ledger verification process was bypassed.
Safe Co-Founder’s Response
Safe co-founder Martin Köppelmann explained that the attack targeted the interface, not the Safe code itself. He emphasized the need for improved transaction verification and proposed implementing additional security measures.
This incident highlighted the ongoing vulnerabilities in crypto security and the need for stronger security measures to prevent similar attacks in the future.