Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Bybit

Security incidents tagged Bybit. Newest first.

0 Bybit incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
608
Longest quiet run: 595 days (Mar 7–Oct 22)
Show 1 older incident

February 2025 1

  • CriticalNo fix needed

    Bybit loses ~$1.5B in ETH after Safe{Wallet} frontend is trojanized (North Korea)

    North Korean TraderTraitor/Lazarus hackers compromised a Safe{Wallet} developer's Mac, took over AWS session tokens and injected JavaScript into Safe's S3-hosted frontend. Bybit's signers approved what looked like a routine transfer but was a malicious transaction. It is the largest crypto theft on record; the FBI attributed it to North Korea.

    Bybit cold wallet / Safe{Wallet} web UIClosed Mar 6, 2025