LIVE
UTC --:--:--
OT SECURITY HUB
by zuckergates
// INCIDENT · 2025

Bybit Cold Wallet Heist (Lazarus)

Lazarus memanipulasi front-end Safe{Wallet} sehingga operator menandatangani transaksi malicious dari cold wallet Bybit.

criticalGlobalFinancialLazarus Group (DPRK)
Impact
~USD 1,46 miliar ETH dicuri — pencurian kripto terbesar dalam sejarah.
Initial vector
Safe{Wallet} UI compromise → blind signing
Lessons learned
  • Hardware verification transaksi
  • Zero-trust UI signing
  • Segregasi SaaS multi-sig