Singapore-based cryptocurrency exchange Bybit has fallen victim to a massive security breach, with hackers siphoning off over $1.4 billion worth of Ethereum (ETH) and other ERC-20 tokens. The attack, which targeted the exchange’s ETH cold wallet, is one of the largest centralized exchange hacks in crypto history, surpassing even the infamous Mt. Gox and Coincheck breaches.
The exploit was first detected by on-chain security analyst ZachXBT, who alerted the crypto community to blacklist the hacker’s addresses. Bybit co-founder and CEO Ben Zhou confirmed the breach, stating that the attacker had manipulated the exchange’s multisignature ETH cold wallet through a deceptive transaction.
Despite the scale of the breach, Bybit has assured users that all non-ETH cold wallets remain secure and that withdrawals are functioning normally. "Bybit is solvent even if this hack loss is not recovered; all client assets are 1:1 backed — we can cover the loss," Zhou stated, aiming to reassure customers amid market panic.
The hack has sent shockwaves through the crypto market, with ETH prices dropping over 3% in response to the news. Analysts have pointed out that approximately 75% of Bybit users’ ETH deposits were stolen, raising concerns about centralized exchange security.
Despite the scale of the breach, Bybit has assured users that all non-ETH cold wallets remain secure and that withdrawals are functioning normally. "Bybit is solvent even if this hack loss is not recovered; all client assets are 1:1 backed — we can cover the loss," Zhou stated, aiming to reassure customers amid market panic.
The hack has sent shockwaves through the crypto market, with ETH prices dropping over 3% in response to the news. Analysts have pointed out that approximately 75% of Bybit users’ ETH deposits were stolen, raising concerns about centralized exchange security.
Adding to the industry’s worries, February 2025 has seen a spike in security breaches. Just days before the Bybit hack, Starknet-based money-market protocol ZkLend was exploited for $9.5 million. Additionally, Solana-based decentralized exchange Jupiter and Eliza Labs founder Shaw Walters suffered social media breaches, where attackers used their accounts to promote scams.