How the Safe Client Led to Bybit's $1.5 Billion Hack

user avatar

by Giorgi Kostiuk

2 years ago

The recent $1.5 billion hack on Bybit revealed important lessons for the crypto world. This article explores how the attackers used the Safe Client to compromise systems.

Preliminary Conclusions About Safe App Compromise

Official reports revealed that a benign JavaScript file in the Safe app was replaced with malicious code on February 19 at 15:29:25 UTC. The attack specifically targeted Bybit’s Ethereum multisig wallet. The compromise occurred via a Safe developer machine, with a leaked account or API key.

The attack was directed at Bybit but could have affected any exchange or entity.None

Safe Official Statement

In its statement, Safe revealed that the attack was conducted by the Lazarus Group and affected a Bybit machine account, though Safe smart contracts remained unaffected. Additional security measures have been implemented to eliminate the attack vector. External security checks did not reveal vulnerabilities in Safe smart contracts or frontend source code.

Lazarus is a state-sponsored North Korean hacker group known for sophisticated social engineering attacks.None

Official FBI Report

The FBI reports that stolen assets were converted into BTC and other cryptocurrencies, likely to be laundered and turned into fiat via numerous addresses on various blockchains. Recommendations included blocking transactions with addresses connected to activity known as TraderTraitor by the FBI.

The attack has revealed numerous vulnerabilities in secure applications within the crypto space. Users and companies must remain vigilant and cautious about their systems’ security.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

MEXC Launches 'Trading Takes Two' Campaign to Showcase AI Capabilities

MEXC is launching a month-long campaign titled 'Trading Takes Two' to showcase how MEXC AI supports users in their trading journey.

user avatarTenzin Dorje

HTX Research Highlights Risks in Stock-Linked Memecoins

HTX Research's report highlights the risks of stock-linked memecoins, focusing on misleading high APY figures and the importance of understanding market conditions.

user avatarBayarjavkhlan Ganbaatar

HTX Research Unveils Insights on Stock-Linked Memecoins

HTX Research has released a report on stock-linked memecoins, analyzing their market structure and growth potential.

user avatarMohamed Farouk

BAI Builds Closed-Loop Infrastructure for the Agent Economy

BAI is building a closed financial loop for the agent economy, integrating models and agents to facilitate seamless transactions.

user avatarDiego Alvarez

BAI Sets New Industry Record with 151 Trillion Tokens Daily Throughput

BAI has set a new industry record with a daily throughput of over 151 trillion tokens, marking a significant increase since its launch.

user avatarElias Mukuru

Justin Sun Prize Launched to Transform Scientific Research

The Justin Sun Prize has been established to redefine scientific rewards in the AI era, offering up to $1 million for breakthroughs in fundamental disciplines and machine formal verification.

user avatarKenji Takahashi

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.