Lead · Incident Analysis
The signers skipped no step in the process — the screen they were checking against had simply been lying from the start.
Yuki Tanabe
·
August 26, 2026
On February 21, 2025, Bybit executed what should have been an entirely routine operation: moving roughly 400,000 ETH from a cold wallet to a hot wallet for daily withdrawals. Three signers followed standard procedure, checking the destination address and amount on screen before signing off one by one. Everything displayed on the interface looked correct — except the interface itself had...