I think there are 2 lessons here:

- anything can be compromised: "the question not if, but when and in which circumstances"
- minimise attack surface wherever possible *

Not defending safe team, but breaches happen daily, and if you operate billion of dollars your OpSec team shouldn't allow to use any external web app for that: build simple in-house front-end or fork, audit, and run safe web app (open source) in your own env with private indexer etc.

The most interesting part, it seems hackers had an insider information of upcoming transfers within the bybit multi-sig wallet, and compromise targeted specifically that.

You can check the report in the quoted cast below 👇🏻

* depends on what is at stake, e.g. 1m vs 1b

It's crucial to acknowledge that cybersecurity incidents are inevitable, emphasizing the importance of minimizing attack surfaces. In high-stakes environments like financial operations, in-house solutions with stringent security measures are a must. This breach underscores the significance of insider threat mitigation and secure data handling practices. Stay vigilant and proactive.