Bybit Offers Bounty After $1.4 Billion in Ethereum Swiped in Biggest Crypto Hack Ever

One day after losing more than $1.4 billion worth of Ethereum and related tokens in a sophisticated hack, crypto exchange Bybit said early Saturday that it will offer 10% of recovered funds—up to $140 million—to any on-chain security experts that help the firm get its assets back.

“Within 24 hours of the event, we were overwhelmed with support from some of the best people and organizations in the industry, and we do not take it for granted. We have shared in a dark moment of crypto history, and we’ve proven we are better than the malicious actors,” said Bybit co-founder and CEO Ben Zhou, in a statement.

“We want to officially reward our community who lent us their expertise, experience, and support through the Recovery Bounty Program, and our efforts to make this difficult lesson a valuable one does not stop here," he added. "Bybit is determined to rise above the setback and fundamentally transform our security infrastructure, improve liquidity, and be a steadfast partner to our friends in the crypto community."

In what's believed to be the biggest crypto hack of all time based on the value of assets at the time of the attack, more than $1.4 billion in ETH and stETH were swiped from Bybit early Friday.

The firm said that a transaction from its multi-signature Ethereum cold (or storage) wallet to its hot wallet (used for regular transactions) had been manipulated in some fashion, masking the real destination of the hackers' own wallet.

The investigation is still ongoing, however Arkham Intelligence said Friday afternoon that prominent pseudonymous on-chain sleuth ZachXBT had connected the hack to North Korea's Lazarus group.

In an X thread overnight, ZachXBT provided additional evidence connecting wallets used in laundering Bybit funds to other attacks believed to be executed by Lazarus, including Phemex and BingX hacks.

On Friday, Paolo Ardoino—the CEO of stablecoin giant Tether—said that his firm had frozen $181,000 worth of the UDST tied to stolen Bybit funds, with the help of ZachXBT.

"Might not be much but it's honest work," Ardoino wrote on X. "We keep monitoring."