Edit: Bybit hack — CryptoScamsWiki

Title / name *

Summary *

Category *

Scam type *

Severity *

Chain

Token

Amount lost (USD)

Image

Upload

Paste a link or upload a file (max 5 MB).

Details (Markdown supported)

## Summary

On February 21, 2025, the cryptocurrency exchange Bybit lost approximately $1.5 billion — about 401,000 ETH — in what is widely described as the largest cryptocurrency theft in history. [1][2]

## How it happened

Rather than breaking Bybit's own systems or the Safe{Wallet} smart contracts, the attackers carried out a supply-chain/operational-security attack: they compromised a Safe{Wallet} developer environment and injected malicious code into the wallet interface so that, when Bybit signers approved a routine transfer from cold storage, the interface displayed legitimate details while the signature actually authorized a malicious contract that drained the wallet. [1][2]

## Attribution

On February 26, 2025, the FBI attributed the theft to North Korea, referring to the activity as "TraderTraitor" (part of the Lazarus Group umbrella); investigators including ZachXBT and Arkham independently linked it to the same actor. Bybit said it secured bridge financing to cover any unrecoverable losses. [1][3]

_Bracketed numbers refer to the numbered sources listed below._

Aliases (one per line)

Wallets (chain:address per line)

Propose an edit