Back to dashboard
Friday, February 21, 2025 at 14:13 UTC

Bybit

Safe{Wallet} UI spoofed during signing — largest crypto hack ever.

Partial
Funds stolen
$1460.00M
Recovered
$42.00M3%
Still outstanding
$1418.00M
Chain
Ethereum
Category
CEX
Attack vector
Social Engineering
Reported by
SlowMist
Incident ID
h2025-1

Exploit & recovery timeline

  1. Feb 21, 2025 · 12:13 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the social engineering exploit against Bybit.

  2. Feb 21, 2025 · 14:13 UTC
    Exploit executed

    $1.46B drained from Bybit on Ethereum via Social Engineering.

  3. Feb 21, 2025 · 15:13 UTC
    Detected by SlowMist

    SlowMist flagged the anomalous transactions and published an initial alert.

  4. Feb 21, 2025 · 18:13 UTC
    Protocol response

    Bybit paused affected contracts or withdrawals and began tracing outbound flows.

  5. Feb 22, 2025 · 14:13 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Feb 28, 2025 · 14:13 UTC
    Partial recovery

    $42.0M of $1.46B recovered (3%); the remainder is still unaccounted for.

  7. Mar 23, 2025 · 14:13 UTC
    Investigation continues

    Remaining funds monitored across chains with exchange partners notified.