# the Bybit hack: crypto’s biggest heist ever

**Published by:** [Onchain Insights](https://paragraph.com/@onchain-insights/)
**Published on:** 2025-02-27
**Categories:** cryptocurrency, blockchai̇n, hacking, defi
**URL:** https://paragraph.com/@onchain-insights/the-bybit-hack-cryptos-biggest-heist-ever

## Content

If you’ve heard of Bitcoin or Ethereum, you’ve likely come across the buzz around cryptocurrency exchanges, platforms where people buy, sell, and store digital currencies. But last week, on February 21, 2025, the crypto world was shaken by what experts are calling the largest digital theft in history. Bybit, a major cryptocurrency exchange based in Dubai, revealed that hackers stole nearly $1.5 billion worth of Ethereum (ETH), one of the most popular cryptocurrencies. For anyone curious about crypto or already dabbling in it, this incident raises big questions about security, trust, and the future of digital assets.What Happened?Bybit, which serves over 50 million users worldwide and ranks as the second largest crypto exchange by trading volume, was hit by a cyberattack. The hackers targeted one of Bybit’s “cold wallets” which is a secure, offline storage systems designed to protect digital assets from online threats. During a routine transfer from this cold wallet to a “warm wallet” (used for daily trading), the attackers pulled off an elaborate trick. Here’s the kicker…the hackers didn’t just brute force their way in. They used a clever deception, manipulating the user interface (UI) shown to Bybit’s wallet signers — people authorized to approve transactions. The UI displayed what looked like a normal, safe transfer, but behind the scenes, the attackers altered the underlying smart contract logic, a set of automated rules on the blockchain. This allowed them to take control of the wallet and drain it of over 400,000 ETH, valued at around $1.5 billion at the time. Bybit’s CEO, Ben Zhou, quickly responded, assuring users that other wallets were secure and that the exchange’s operations continued uninterrupted. He also emphasized that Bybit had enough reserves and had secured loans to cover the loss, promising to make affected users whole even if the stolen funds couldn’t be recovered. Still, the news triggered panic, with users rushing to withdraw their assets, leading to over $5.5 billion in outflows from the platform in the days that followed.Who’s Behind It?While the investigation is ongoing, blockchain analysts and security firms, like Elliptic and Chainalysis, have pointed fingers at North Korea’s Lazarus Group, a state-sponsored hacking collective known for targeting crypto platforms. This group has a history of stealing billions in digital assets since 2017, reportedly to fund North Korea’s ballistic missile program. The Bybit hack fits their pattern: sophisticated social engineering (like phishing attacks to trick employees), malware, and complex laundering techniques to move and hide the stolen funds across decentralized exchanges, bridges, and anonymous services. Some speculate that the attackers infected Bybit’s systems with malware or tricked employees into approving malicious transactions, exploiting vulnerabilities even in multi-signature wallets — systems requiring multiple approvals, once thought to be nearly impenetrable. Posts on social media platforms like X have echoed this, with users and analysts breaking down how the UI spoofing and smart contract manipulation worked, raising broader concerns about whether even “secure” systems are truly safe.Why Does This Matter?For the average person, this hack might seem like just another crypto headline, but it’s a wake up call for anyone holding or considering digital assets. Here’s why:Trust in Exchanges Is Shaky: Centralized exchanges like Bybit hold users’ funds in their wallets, mixing customer assets with their own. If hackers strike or the exchange goes bankrupt, your money could be at risk. This incident highlights why some prefer “non-custodial” wallets, where you control your private keys and assets, though they’re less convenient.Crypto Isn’t Immune to Old-School Crime: Despite the futuristic tech behind blockchain, cyberattacks like this show that human error, phishing, and state-sponsored hacking are still major threats. The crypto industry, still in its Wild West phase, loses billions annually to hacks — $2.2 billion in 2024 alone, according to industry reports.Market Impact: The hack caused Ethereum’s price to drop nearly 7% initially, though it later recovered. It also sparked a broader sell-off and risk aversion in the crypto market, reminding investors that bad news can trigger volatility. For Bybit, the “bank run” of withdrawals tested its solvency, even with assurances from leadership.A Call for Better Security: Bybit’s response — working with forensic experts, launching a $140 million recovery bounty, and maintaining transparency — sets a benchmark for crisis management. But it also exposes gaps in security, like the vulnerability of multi-signature wallets and the need for stronger UI protections and employee training against phishing.What Should You Do?If you’re thinking about or already using crypto, here are a few practical tips:Don’t Keep Everything on Exchanges: Consider using hardware wallets (like Ledger or Trezor) or non-custodial software wallets for long-term storage. These give you full control over your private keys, reducing reliance on exchanges.Stay Informed: Follow reputable crypto news and security blogs, but be wary of rumors on social media. The Bybit hack rumors spread rapidly on X before official confirmation, causing unnecessary panic.Be Cautious Online: Phishing and social engineering are major risks. Never click suspicious links or share private keys, even if an email or message looks legitimate.Diversify Risk: Don’t put all your eggs in one crypto basket. Spread your investments across different assets and platforms to mitigate losses from a single hack or failure.Looking AheadThe Bybit hack doesn’t mean crypto is doomed, but it underscores the industry’s growing pains. As institutional investors and regulators eye digital assets, incidents like this could push for stricter security standards, better auditing, and more robust legal frameworks. Bybit’s transparency and quick action have helped stabilize the situation, but trust in centralized exchanges remains fragile. For the everyday crypto user, this is a reminder that while blockchain technology promises decentralization and security, human oversight and cyberattacks can still disrupt it. As the industry matures, expect more focus on cybersecurity, but also brace for the occasional shockwave — like the one Bybit just sent through the market. If you’re new to crypto or rethinking your strategy, now’s the time to ask: How secure are your digital assets, and where do you really want to keep them? The answer might just save you from the next big heist.

## Publication Information

- [Onchain Insights](https://paragraph.com/@onchain-insights/): Publication homepage
- [All Posts](https://paragraph.com/@onchain-insights/): More posts from this publication
- [RSS Feed](https://api.paragraph.com/blogs/rss/@onchain-insights): Subscribe to updates
- [Twitter](https://twitter.com/0xJayOnchain): Follow on Twitter

## Optional

- [Collect as NFT](https://paragraph.com/@onchain-insights/the-bybit-hack-cryptos-biggest-heist-ever): Support the author by collecting this post
- [View Collectors](https://paragraph.com/@onchain-insights/the-bybit-hack-cryptos-biggest-heist-ever/collectors): See who has collected this post