Alex_bn

#币安广场 What more can I say about its gold content?

One picture shows how powerful North Korean hackers are? Nearly 1.5 billion ETH assets were stolen from Bybit Exchange. The basic situation currently known:
1. The hacker stole directly from the cold wallet. It is worth reflecting on whether the technology is too powerful or the insiders are insidious?
2. At present, from the technical and public opinion level, the circle is more inclined to be the work of North Korean hackers.
3. Short-term negative ETH price, from 2800 to 2600 (lowest) yesterday, the current incident is almost consumed.
4. Binance and Bitget support Bybit. The two exchanges have sent more than 50,000 ETH to the Bybit wallet in total, providing blood transfusions to peer borrowing.
5. The Bybit platform has not been affected yet, the platform does not restrict withdrawals, and the CEO of Bybit claims that the overall funds can cover the losses and have been almost dealt with.

Hacker operation process:
The hacker is also awesome. He deployed the malicious backdoor contract three days in advance.
The hacker is likely to have confirmed that Bybit's three multi-signature computers have been invaded and have the conditions for attack, waiting for them to operate.
The trap: Next, when the multi-signature staff performed signature operations such as daily transfers, the hacker replaced the signature content.
The staff looked at the webpage and thought it was a normal transaction such as a transfer - but they didn't know that it was changed to a transaction of "upgrading the contract to replace the previously deployed malicious contract". So, the tragedy happened. The malicious contract with a backdoor was easily withdrawn by the hacker.

North Korean hackers are really awesome:
It is worth noting that according to the big guys on the chain, this hack was mainly carried out by the North Korean-supported hacker organization Lazarus Group. When I counted the country's BTC reserves before, I said that North Korea's BTC reserves are very rich, but basically all the sources are stolen by hackers. In addition to this time, North Korean hackers have also carried out many times in history. I will simply sort them out!

I found that from 2017 to 2025, this hacker team was very active on the chain, and a total of nearly 50 hacking incidents occurred, causing losses of more than 3.72 billion US dollars to the entire cryptocurrency and the loss of more than 8,500 BTC. Not only that, it also led to the bankruptcy of Youbit Exchange.It’s fucking awesome.