Hackers steal $1.5 billion from exchange Bybit in biggest-ever crypto heist

Bybit, a major cryptocurrency exchange, has been hacked to the tune of $1.5 billion in digital assets, in what’s estimated to be the largest crypto heist in history.

The attack compromised Bybit’s cold wallet, an offline storage system designed for security. The stolen funds, primarily in ether, were quickly transferred across multiple wallets and liquidated through various platforms.

“Please rest assured that all other cold wallets are secure,” Ben Zhou, CEO of Bybit, posted on X. “All withdrawals are NORMAL.”

For Subscribers

FOR SUBSCRIBERSPhone a friend: Republicans lean on Cabinet members as they break with Trump

FOR SUBSCRIBERSCentrist think tank warns 2028 Democrats against swinging too far left on immigration

FOR SUBSCRIBERSRussia’s secrecy after a mysterious plague lab death raises global alarm

FOR SUBSCRIBERSAfter surviving a botched lethal injection, Christa Pike faces unprecedented legal battle

FOR SUBSCRIBERSHunger in a land of plenty: Major food banks face ‘heartbreaking’ need, NBC News survey finds

FOR SUBSCRIBERSInflation and tariffs push U.S. holiday spending projections to a record $1.7 trillion

FOR SUBSCRIBERSWhat happened inside the room where officials tried to execute Christa Pike by lethal injection

FOR SUBSCRIBERSHow we reported the saga of the CIA officer and his gold-bar stash

FOR SUBSCRIBERSBrad Raffensperger gears up to oversee his final election in Georgia

FOR SUBSCRIBERSDiddy is punished following NBC News report on his VIP life in prison and contraband cellphone use

FOR SUBSCRIBERS‘Too young to vote, old enough to be tear gassed’: French protesters’ anger swells

FOR SUBSCRIBERSDOJ gets aggressive in suing states that challenge Trump’s immigration policies

FOR SUBSCRIBERSJustice Department seeks criminal charge for former Trump aide Cassidy Hutchinson

FOR SUBSCRIBERS‘I just want to hold him’: USS Lincoln sailor to meet his 10-month-old son as ship docks

FOR SUBSCRIBERSSenate candidates run on raising Social Security taxes for higher incomes to prevent benefit cuts

Slide 1 of 1

For Subscribers

FOR SUBSCRIBERSPhone a friend: Republicans lean on Cabinet members as they break with Trump

FOR SUBSCRIBERSCentrist think tank warns 2028 Democrats against swinging too far left on immigration

FOR SUBSCRIBERSRussia’s secrecy after a mysterious plague lab death raises global alarm

FOR SUBSCRIBERSAfter surviving a botched lethal injection, Christa Pike faces unprecedented legal battle

FOR SUBSCRIBERSHunger in a land of plenty: Major food banks face ‘heartbreaking’ need, NBC News survey finds

FOR SUBSCRIBERSInflation and tariffs push U.S. holiday spending projections to a record $1.7 trillion

FOR SUBSCRIBERSWhat happened inside the room where officials tried to execute Christa Pike by lethal injection

FOR SUBSCRIBERSHow we reported the saga of the CIA officer and his gold-bar stash

FOR SUBSCRIBERSBrad Raffensperger gears up to oversee his final election in Georgia

FOR SUBSCRIBERSDiddy is punished following NBC News report on his VIP life in prison and contraband cellphone use

FOR SUBSCRIBERS‘Too young to vote, old enough to be tear gassed’: French protesters’ anger swells

FOR SUBSCRIBERSDOJ gets aggressive in suing states that challenge Trump’s immigration policies

FOR SUBSCRIBERSJustice Department seeks criminal charge for former Trump aide Cassidy Hutchinson

FOR SUBSCRIBERS‘I just want to hold him’: USS Lincoln sailor to meet his 10-month-old son as ship docks

FOR SUBSCRIBERSSenate candidates run on raising Social Security taxes for higher incomes to prevent benefit cuts

Slide 1 of 1

Blockchain analysis firms, including Elliptic and Arkham Intelligence, traced the stolen crypto as it was moved to various accounts and swiftly offloaded. The hack far surpasses previous thefts in the sector, according to Elliptic. That includes the $611 million stolen from Poly Network in 2021 and the $570 million drained from Binance in 2022.

Analysts at Elliptic later linked the attack to North Korea’s Lazarus Group, a state-sponsored hacking collective notorious for siphoning billions of dollars from the cryptocurrency industry. The group is known for exploiting security vulnerabilities to finance North Korea’s regime, often using sophisticated laundering methods to obscure the flow of funds.

“We’ve labelled the thief’s addresses in our software, to help to prevent these funds from being cashed-out through any other exchanges,” said Tom Robinson, chief scientist at Elliptic, in an email.

The breach immediately triggered a rush of withdrawals from Bybit as users feared potential insolvency. Zhou said outflows had stabilized. To reassure customers, he announced that Bybit had secured a bridge loan from undisclosed partners to cover any unrecoverable losses and maintain operations.

The Lazarus Group’s history of targeting crypto platforms dates back to 2017, when the group infiltrated four South Korean exchanges and stole $200 million worth of bitcoin. As law enforcement agencies and crypto tracking firms work to trace the stolen assets, industry experts warn that large-scale thefts remain a fundamental risk.

“The more difficult we make it to benefit from crimes such as this, the less frequently they will take place,” Elliptic’s Robinson wrote in a post.