
Bybit Exchange Hacked: Over $1.4B in ETH Stolen in Major Security Breach
Few days after refusal to list the Pi Network native coin, Pi coin, Bybit, a prominent cryptocurrency exchange headquartered in the United Arab Emirates, experienced a significant security breach resulting in the loss of approximately $1.4 billion in Ethereum-related assets. The compromised funds included liquid-staked Ether (stETH), Mantle Staked ETH (mETH), and various ERC-20 tokens. This incident has sent shockwaves throughout the crypto community, raising concerns about the security protocols of centralized exchanges.
Details of the Bybit Security Breach
The attack specifically targeted one of Bybit’s Ethereum cold wallets. According to CEO Ben Zhou, the breach occurred during a routine transfer from the cold wallet to a hot wallet. The attackers employed a sophisticated method that manipulated the smart contract’s logic, allowing unauthorized access to the funds. Despite this compromise, Zhou emphasized that all client funds remain secure and that the exchange’s operations continue without interruption.
In the immediate aftermath, Bybit observed an uptick in fund withdrawals as users reacted to the news. The exchange is actively collaborating with blockchain security experts to trace and recover the stolen assets. Notably, blockchain analytics firm Arkham Intelligence confirmed that the misappropriated funds are being moved and liquidated by the perpetrators.
Community and Industry Reactions
The crypto community has been abuzz with reactions from users, industry experts, and influencers. Many have expressed concerns over the security measures employed by centralized exchanges. Some users have taken to social media platforms, urging others to withdraw their funds from centralized platforms and consider decentralized alternatives.
Industry analysts have pointed out that this incident underscores the vulnerabilities inherent in centralized custody of digital assets. They advocate for enhanced security protocols, regular audits, and increased transparency from exchange operators to restore user confidence.
In response to the recent Bybit security breach, Binance CEO Changpeng “CZ” Zhao has recommended that Bybit temporarily suspend withdrawals to prevent further unauthorized outflows. CZ has also offered Binance’s assistance in tracking and recovering the stolen funds. Blockchain security analyst ZachXBT reported that the hacker has begun dispersing the stolen Ether, splitting two batches of 10,000 ETH across 48 addresses, and has already swapped $200 million worth of mETH and stETH on decentralized exchanges.
Additionally, Tron founder Justin Sun has stated that his team is closely monitoring the situation and is committed to aiding in the tracking of the misappropriated assets, providing all support within their capabilities.
These collaborative efforts underscore the cryptocurrency community’s collective commitment to addressing security breaches and safeguarding user assets.
Assurance of User Funds and Exchange Solvency
In response to the breach, Bybit has reassured its users that their funds are backed 1:1, maintaining the exchange’s solvency. The company stated that its cold wallets remain fully secure and that all client funds are safe. Operations are proceeding as usual without any disruption.
Impact on Ethereum Price and the Cryptocurrency Market
The breach has had a noticeable impact on the cryptocurrency market, particularly on Ethereum’s price. Following the news, Ethereum (ETH) experienced a decline, reflecting investor concerns over the security of crypto exchanges. The broader market also showed signs of volatility as traders reacted to the incident.
Rise in Crypto Hacks and Scams in 2025
The Bybit hack is the latest in a series of high-profile security breaches affecting the cryptocurrency industry. In January 2025, the UFC’s official Instagram account was compromised, with unauthorized posts promoting a fraudulent cryptocurrency scheme.
ZkLend Hack (February 12, 2025): Decentralized finance (DeFi) lending protocol zkLend, operating on the Starknet network, suffered a hack resulting in the loss of approximately $9.5 million worth of Ethereum (around 3,300 ETH). The stolen funds were initially transferred to Ethereum and laundered using the Railgun protocol.
Social Media Hacks (February 5, 2025): The official accounts of Jupiter, a decentralized exchange on the Solana blockchain, and former Malaysian Prime Minister Mahathir Mohamad were compromised. Hackers utilized these platforms to promote fraudulent memecoins, misleading followers and investors.
Eliza Labs Founder’s X (Twitter) Account Compromised: Despite having two-factor authentication enabled, the founder’s account was breached, and scam links were disseminated to followers, highlighting vulnerabilities even with enhanced security measures.
Additionally, in October 2024, a U.S. government-controlled crypto wallet containing funds seized from the 2016 Bitfinex hack was compromised, resulting in the loss of approximately $20 million. The funds were illicitly transferred and laundered through various channels before a portion was recovered.
These incidents underscore the increasing need for robust security measures within the cryptocurrency ecosystem to protect against sophisticated cyber threats.
Conclusion
The recent breach of Bybit’s security infrastructure, resulting in the loss of over $1.4 billion in Ethereum-related tokens, highlights the persistent vulnerabilities within the cryptocurrency exchange landscape. While Bybit has assured users of the safety of their funds and the continuity of operations, this event serves as a stark reminder of the critical importance of advanced security protocols and constant vigilance in the rapidly evolving digital asset environment.