Bybit, a cryptocurrency exchange located in Dubai, has fallen victim to the largest cryptocurrency theft in history. The company recently announced a breach leading to the loss of $1.5 billion worth of Ethereum. This staggering theft surpasses the previous record of $611 million stolen from the PolyNetwork platform in 2021. Arkham Intelligence, a crypto research group, has pointed fingers at the notorious North Korean hacking group, the Lazarus Group, for perpetrating this cyber heist.
The Lazarus Group is infamous for its longstanding cybercrime activities, allegedly supported by the North Korean government. Their criminal record includes high-profile targets such as Sony Pictures in 2014, in retaliation for a film parodying North Korean leader Kim Jong Un, and Bangladesh Bank in 2016, from which they stole $81 million. The group was also behind the 2017 WannaCry ransomware attack, affecting over 300,000 computers worldwide. In 2024 alone, the blockchain intelligence firm Chainalysis estimates that the Lazarus Group stole $1.34 billion across 47 cryptocurrency hacks.
According to Bybit’s co-founder and CEO Ben Zhou, the attackers exploited the platform by manipulating the user interface and URL, tricking users into approving fraudulent transactions. This allowed the hackers to alter smart contract logic, gaining control over Bybit’s Ethereum cold wallet, which is typically considered a secure method for storing cryptocurrencies offline. Once they seized control of the cold wallet, the hackers transferred the Ethereum to their own digital accounts.
The stolen Ethereum was subsequently dispersed across 53 wallets, which are closely monitored by blockchain and smart contract auditing teams. This scrutiny complicates efforts by the Lazarus Group to launder the stolen funds. Reports indicate that some of the funds have already been moved to a cryptocurrency mixer named eXch, which fragments cryptocurrencies into smaller amounts and mixes them with other users’ funds, obscuring the transaction trail. They may convert the cryptocurrencies into different forms and distribute them across multiple wallets before exchanging them for fiat currency, a process expected to involve multiple mixers to guarantee greater anonymity.
The issue of security within the cryptocurrency industry has come under severe scrutiny. The Bybit breach is part of a growing list of cyberattacks; in 2024 alone, there were 303 successful cyber intrusions on cryptocurrency platforms, resulting in $2.2 billion in losses. It remains uncertain what long-term effects these security breaches will have on cryptocurrency markets, but it is increasingly clear that the industry must enhance its cybersecurity measures to protect against future attacks.
For detailed insights into this evolving situation and its broader implications for the cryptocurrency market, the full original article can be accessed here: [https://www.forbes.com/sites/steveweisman/2025/02/22/korean-hackers-steal-15-billion-from-cryptocurrency-exchange/](https://www.forbes.com/sites/steveweisman/2025/02/22/korean-hackers-steal-15-billion-from-cryptocurrency-exchange/)
