Safe{Wallet} UI spoofed during signing — largest crypto hack ever.
Attacker wallets funded and staged ahead of the social engineering exploit against Bybit.
$1.46B drained from Bybit on Ethereum via Social Engineering.
SlowMist flagged the anomalous transactions and published an initial alert.
Bybit paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$42.0M of $1.46B recovered (3%); the remainder is still unaccounted for.
Remaining funds monitored across chains with exchange partners notified.