In a staggering cyber heist last Friday, hackers stole approximately $1.46 billion from Bybit, making it the largest cryptocurrency theft in history. The notorious Lazarus Group, allegedly backed by North Korea, is suspected of orchestrating the attack, which mirrors their past cybercrime strategies.
The breach exploited security loopholes between Ledger and Safe{Wallet}, deceiving Bybit employees into approving fraudulent transactions. Within minutes, stolen funds were funneled into 50 different wallets and systematically laundered through decentralized exchanges.
North Korea’s involvement in cybercrime has been well-documented, with Lazarus using stolen funds to support the country’s regime, including its ballistic missile program. The group has previously been responsible for high-profile attacks such as the 2017 WannaCry ransomware attack and multiple cryptocurrency heists.
Blockchain investigators observed that the stolen assets were dispersed through a method known as “layering,” making it difficult to trace the final destination. Crypto intelligence firm Arkham noted a unique pattern in the laundering process, suggesting a manual rather than automated approach.
In response, Bybit CEO Ben Zhou has issued an unprecedented $140 million bounty to recover the funds and dismantle Lazarus, signaling a potential global crackdown on cybercrime. Security experts warn that this latest attack may spur coordinated international efforts to curb North Korea’s illicit cyber activities. The U.S. and its allies have long sought to counter North Korea’s cyber operations, which provide crucial funding for Pyongyang’s nuclear ambitions.
Despite the attack, Bybit restored its reserves within 72 hours, ensuring no customer losses. The incident underscores both the vulnerabilities and resilience of the crypto industry, as calls for enhanced security measures grow louder.
