Dubai-based cryptocurrency exchange Bybit Technology was targeted by North Korean hacking group Lazarus, resulting in the theft of $1.5 billion worth of Ethereum. Bybit has initiated a bounty program of up to $140 million to aid in recovering the stolen funds, marking the incident as one of the largest in cryptocurrency heist history. In the aftermath, Bybit plans to launch a 'HackBounty platform' for industry-wide security efforts. The attack involved compromising SafeWallet, a multisig wallet platform, through cloud accounts and altering JavaScript code, although SafeWallet has reaffirmed no vulnerabilities in its smart contracts or front-end services.
"id": "byb516022725",
"linkid": "bybitexchange",
"type": "Breach",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"