Comment on Crypto exchange Bybit says a hacker took control of one of its cold Ethereum wallets, resulting in what analysts estimate was the loss of ~$1.5B worth of tokens

muntedcrocodile@lemm.ee ⁨1⁩ ⁨year⁩ ago

• x00z@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Image

  source

  • dhork@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Do I understand this correctly, then, that this was some sort of MITM attack where valid requests to the multisig parties were replaced by malicious code while still appearing to be valid to the signers? That must be an inside job.

    And this is the first time I have heard the word “musked” in this context…

    source

    • x00z@lemmy.world ⁨1⁩ ⁨year⁩ ago

      Do I understand this correctly, then, that this was some sort of MITM attack where valid requests to the multisig parties were replaced by malicious code while still appearing to be valid to the signers? That must be an inside job.

      I have no idea. I guess they’ll release a lot more info regarding this in the next few days.

      And this is the first time I have heard the word “musked” in this context…

      I think his English isn’t good looking at the rest of the message. Might be “masked” instead.

      source
• golli@lemm.ee ⁨1⁩ ⁨year⁩ ago

  What I don’t quite understand is how there is 1.5 billion in a single wallet. Or how are these things structured?

  This article puts their total assets under management at $15.7b, which are held in different cryptocurrencies with ethereum at just above $5b.

  So I am wondering how they have more than 1/6 of their Ethereum in a single wallet or were these multiple that were connected and got compromised through the same vulnerability? How expensive is it to have more individual wallets? Would it not be feasible to have it split in something like $100m chunks? Or any other more moderate size.

  source

  • DaPorkchop_@lemmy.ml ⁨1⁩ ⁨year⁩ ago

    Making more wallets would cost nothing more than a few hundred bytes of storage each for the keys. I have no idea why they wouldn’t have split their funds into evenly sized wallets of, say, $1M each.

    source
• MintyFresh@lemmy.world ⁨1⁩ ⁨year⁩ ago

  With steely determination

  source
• dhork@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Well, either it wasn’t as offline as they all thought, or someone pulled off an epic inside job.

  source
• Transform2942@lemmy.ml ⁨1⁩ ⁨year⁩ ago

  Somebody made a huge opsec mistake

  source

  • Evotech@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Room temperature wallet

    source

    • muntedcrocodile@lemm.ee ⁨1⁩ ⁨year⁩ ago

      Right next to their iq

      source
• Zachariah@lemmy.world ⁨1⁩ ⁨year⁩ ago

  I recommend gloves.

  source