Bybit Hacked: $1.4B ETH Stolen in Largest Heist in History
Dubai-based cryptocurrency exchange Bybit suffered a massive security breach on Friday, losing approximately $1.4 billion in Ethereum (ETH) after hackers compromised one of its offline cold wallets in what is now the largest cryptocurrency theft in history.
Details of the $1.4 Billion Ethereum Exploit
The platform announced the security breach on Friday, attributing the loss to a highly sophisticated cyberattack targeting one of its secure offline storage systems. During a live broadcast, Bybit co-founder and Chief Executive Officer Ben Zhou confirmed that attackers managed to siphon off approximately 401,346 ETH. At the time of the exploit, the stolen digital assets were valued at roughly $1.4 billion.
How the Bybit Hack Compares to History’s Biggest Heists
Independent analyses from blockchain security firm Elliptic and prominent on-chain researcher ZachXBT verified the staggering $1.4 billion figure. This loss crowns the incident as the largest cryptocurrency theft ever recorded. According to historical tracking by Rekt, a platform monitoring Web3 security breaches, this exploit far surpasses previous record-holding attacks on the Ronin Network ($624 million) and the Poly Network ($611 million).
Elliptic’s co-founder and chief scientist, Tom Robinson, noted that this event transcends typical cybercrime boundaries, suggesting it may represent the largest single theft of any kind in human history. For context, the previous benchmark for the world’s largest heist was the $1 billion plunder of the Central Bank of Iraq, as documented by World Finance.
Breaching the “Unbreachable” Cold Storage
Explaining the mechanics of the breach, Zhou disclosed on X that the perpetrators successfully seized control of one of Bybit’s cold wallets. These offline storage units are designed to remain disconnected from the internet to prevent remote access. Once inside, the hackers transferred the massive reserves of Ethereum to an active, online “warm” wallet before dispersing the funds.
Bybit Assures Users of Solvency and Fund Safety
When asked for further details, Bybit spokesperson Tony Au directed inquiries to Zhou’s official social media updates. In a reassuring statement, Zhou asserted that the exchange remains fully solvent. He emphasized that Bybit possesses the financial reserves to absorb the entire $1.4 billion loss internally, ensuring user balances remain unaffected even if the stolen assets are never recovered.
This resilience is backed by Bybit’s massive operational scale; CoinMarketCap data recently valued the Dubai-based exchange’s total assets at approximately $16 billion.
A Massive Blow to Global Web3 Security
The sheer scale of the Bybit exploit highlights a worrying escalation in Web3 security threats. To put the $1.4 billion loss into perspective, Chainalysis reports that the entirety of crypto cybertheft across all of 2024 totaled $2.2 billion. In 2023, aggregate losses hovered around $2 billion, meaning this single breach accounts for a massive portion of what the entire industry typically loses over an entire year.
