1 hour ago, Bybit hacker's 15,000 cmETH unstaking request was returned by the cmETH withdrawal contract. The hacker then authorized cmETH transactions on DODO, but no further transactions were made, likely due to the cmETH liquidity pool being very shallow, making it impossible to execute.
These 15,000 cmETH should be interceptable.
In addition to these 15,000 cmETH, the amount of ETH stolen from Bybit is 499,000 ($137 million), which has been dispersed by the hacker across 51 addresses. https://debank.com/profile/0x1542368a03ad1f03d96d51b414f4738961cf4443
🚨bybit🚨Some of the stolen funds have begun to be transferred, 205 ETH has entered the BTC network via chainflip. The founder has sought help from the platform, but unfortunately, decentralization is helpless!
Bybit stolen 1.5 billion ETH Official Response Bybit has discovered an unauthorized operation involving one of our ETH cold wallets. This incident occurred when we executed a transfer from our ETH multi-signature cold wallet to a warm wallet. The attacker used a sophisticated method to conceal the signature interface—displaying the correct address on the surface, but actually tampering with the underlying smart contract logic, thereby illegally controlling the affected ETH cold wallet and transferring its assets to an unknown address. Currently, our security team is working closely with top blockchain forensic experts and partners to investigate this matter. We welcome professional teams with on-chain blockchain analysis and asset recovery capabilities to contact us for collaboration. We assure all users and partners: all other Bybit cold wallets are in a completely secure state, and all customer funds are safe, with the platform operating normally.
Security and transparency have always been our top principles, and we will keep you updated on the progress of the incident.