Summary
- SAFE reported that the Bybit hack was caused by a compromise of a Safe Wallet developer's device.
- North Korean hacker group Lazarus was identified as the perpetrator of this attack, utilizing disguised malicious transactions.
- SAFE is proceeding with service recovery and emphasized that there were no vulnerabilities in their smart contracts and source code.
On-chain digital asset custody protocol SAFE announced the results of its post-investigation into the Bybit hack through X (formerly Twitter) on the 26th (local time).
In an official statement, SAFE said, "Forensic analysis revealed that this hack occurred due to a compromise of a Safe Wallet developer's device, and Bybit's SAFE was attacked through disguised malicious transactions," adding that "The Lazarus Group, a North Korean hacker group known to be behind the hack, is well-known for using sophisticated attacks and zero-day exploits."
They further emphasized, "No vulnerabilities were found in SAFE smart contracts, frontend, or service source code," and stated that "After this hacking incident, the Safe Wallet team completely reconstructed the infrastructure and blocked all attack vectors. We are currently proceeding with phased service recovery on the Ethereum mainnet."
JH Kim
reporter1@bloomingbit.ioHi, I'm a Bloomingbit reporter, bringing you the latest cryptocurrency news.
![[Key Economic and Crypto Events for the Week Ahead] U.S. January CPI, etc.](https://media.bloomingbit.io/static/news/brief_en.webp?w=250)
