In case anyone is interested, Bybit Hack Forensics Report:

https://docsend.com/view/s/rmdi832mpt8u93s7

TL;DR:

- Hackers injected malicious code into app.safe.global on Feb 19, 2025, targeting Bybit’s Ethereum Multisig Cold Wallet.

- The attack was triggered automatically during Bybit’s next transaction on Feb 21, 2025.

- Investigation suggests Safe.Global’s AWS or CloudFront credentials were compromised, allowing attackers to modify the JavaScript file.

- The malicious code was found in the Wayback Machine archive, confirming its legitimacy.

- Further investigation is needed to determine the full impact and root cause.

Bottom line: A supply chain attack was used to compromise a key security tool, leading to a targeted wallet exploit.

this is why crypto frontends need to host on @earthfast

Decentralize your frontend, securely.
https://earthfast.com/

editor https://lowercase.cards/ prev: everyname (acq. Q4 '23)

Bybit Hack Forensics Report
As promised, here are the preliminary reports of the hack conducted by @sygnia_labs and @Verichains 
Screenshotted the conclusion and here is the link to the full report: https://t.co/3hcqkXLN5U https://t.co/tlZK2B3jIW

The ByBit hack has brought everyone's attention to frontend security. @EarthFast would have prevented this issue. 🔐

In addition to decentralized frontend hosting, EarthFast protects protocol users by ensuring code authenticity .

More info on how this works below, along with an…

Sid Sethi | ETHDenver

cofounder & coo @earthfast – building vercel for crypto. prev: founding eng @audius

Reconciling all versions of me | Experimenting with social here

More detail from @sidsethi here https://x.com/sidsethi/status/1894845931268583635

thanks for the support @vinayvasanji.eth 🫡