Crypto exchange Bybit says it fully replenished reserves after record $1.5 billion hack

Crypto exchange Bybit says it fully replenished reserves after record .5 billion hack


Jakub Porzycki | Nurphoto | Getty Images

Bybit said it replenished its reserves following a $1.5 billion hack last week, the largest in the history of the crypto industry.

In less than 72 hours, Bybit pieced together hundreds of thousands of ether tokens through a mix of emergency loans and large deposits. While the rapid recovery restored the exchange’s balance and kept customer withdrawals open, it did not account for the stolen crypto.

The breach occurred during a routine internal transfer, when Bybit was moving funds from its offline “cold wallet,” designed for secure, long-term storage, to a “warm wallet,” which enables active trading. During that transfer, hackers exploited security gaps, intercepting the transaction and redirecting the funds to an unknown address.

Bybit CEO Ben Zhou wrote in a post on social media site X on Sunday that the exchange remained solvent, adding that client assets were still fully backed and that withdrawals remained open.

The company secured nearly 447,000 ether tokens through emergency funding from firms such as Galaxy Digital, FalconX and Wintermute. A proof of reserves audit conducted by cybersecurity firm Hacken confirmed that Bybit had successfully restored its reserves, verifying that all major assets — including bitcoin, ether, solana, tether and USDC — exceeded a 100% collateralization ratio.

Recovering the stolen assets remains a challenge.

Blockchain analytics firm Elliptic has identified North Korea’s Lazarus Group as the perpetrators of the attack. The stolen funds were initially dispersed across 50 different wallets, each holding about 10,000 ether tokens, according to Elliptic, as part of an effort to launder the coins.

As of Feb. 24, more than $195 million, or roughly 14.5% of the stolen assets, have already been transferred.

Bybit has offered a 10% bounty for the return of the stolen funds, but history suggests the odds of recovery are slim.

The Lazarus Group has a track record of laundering crypto to evade international sanctions, reportedly using stolen assets to fund North Korea’s nuclear program. In 2022, the group stole $600 million from Axie Infinity and, despite law enforcement intervention, only $30 million was recovered.

Ether, the token at the center of this attack, has fallen about 5% over the past day.

Don’t miss these cryptocurrency insights from CNBC Pro:

Bybit say it's fully recovered after record-breaking $1.5 billion hack



Source

Trump says he has group of ‘very wealthy people’ ready to buy TikTok
Technology

Trump says he has group of ‘very wealthy people’ ready to buy TikTok

U.S. President Donald Trump announced on April 4 that he would again postpone enforcement of a law banning TikTok unless its Chinese owner ByteDance divests from the platform. Vcg | Visual China Group | Getty Images U.S. President Donald Trump told Fox News in an interview aired on Sunday that he has a group of […]

Read More
Nvidia insiders dump more than  billion in stock, according to report
Technology

Nvidia insiders dump more than $1 billion in stock, according to report

NVIDIA founder and CEO Jensen Huang speaks during the NVIDIA GTC Paris keynote, part of the 9th edition of the VivaTech technology startup and innovation fair, held at the Dôme de Paris in the Porte de Versailles exhibition center in Paris on June 11, 2025. Mustafa Yalcin | Anadolu | Getty Images Insiders at artificial […]

Read More
Tesla’s IPO was 15 years ago. The stock is up almost 300-fold since then
Technology

Tesla’s IPO was 15 years ago. The stock is up almost 300-fold since then

CEO of Tesla Motors Elon Musk waves after ringing the opening bell at the NASDAQ market in celebration of his company’s initial public offering in New York June 29, 2010. Brendan McDermid | Reuters At the time of Tesla’s IPO 15 years ago, the company had generated roughly $150 million in revenue in its lifetime. […]

Read More