
Bybit Hack: Updates on Fund Recovery and the Implications for Decentralized Finance
Overview of the Bybit Hack Incident
In a recent update, Ben Zhou, the CEO of Bybit, shared insights into the ongoing efforts to recover funds stolen during a major security breach on the cryptocurrency exchange. This incident, which took place on February 21, resulted in the theft of approximately $1.4 billion in digital assets, marking it as one of the largest hacks on a centralized cryptocurrency exchange to date.
Details of the Attack
The attack, attributed to the notorious Lazarus Group, led to the loss of around 400,000 ETH-related tokens and other significant assets. According to Zhou, about 20% of the stolen funds have become untraceable, while 77% can still be tracked, and 3% have been successfully frozen.
Challenges in Halting Illicit Transactions
Bybit’s CEO highlighted the urgency of the coming weeks in stopping the hackers from liquidating the stolen assets through various channels, including exchanges, over-the-counter platforms, and peer-to-peer systems. The stolen ETH tokens are being swiftly converted into Bitcoin and transferred between numerous wallets, complicating the recovery process.
Impact of Decentralized Protocols on Fund Recovery
The decentralized liquidity protocol, THORChain, has been heavily used by the attackers, with 72% of the conversion activity occurring through this platform. This surge in usage has resulted in record-breaking weekly transaction volumes on THORChain, exceeding $4.5 billion, as reported by DeFiLlama.
Debate Over Decentralized Platforms and Illicit Transactions
The extensive use of THORChain by the hackers has sparked internal discussions regarding the role of decentralized platforms in facilitating unlawful transactions. A prominent member of THORChain, known as TCB, decided to step down from the protocol, expressing concerns over the processing of substantial volumes of stolen funds.
Efforts to Combat Illicit Fund Flows
A temporary proposal to suspend Ethereum transactions on THORChain has been suggested, although no final decision has been reached. In contrast, other cross-chain platforms like Chainflip have taken more immediate measures by temporarily halting their swapping services upon identifying suspicious activities.
Bybit’s Struggle in Fund Recovery
Zhou revealed that significant amounts of the stolen ether have become difficult to trace. For instance, a portion of the funds was processed through eXch, a non-KYC exchange, while another substantial sum moved through the OKX Web3 proxy.
Breakdown of the Stolen Funds
A comprehensive analysis of the hacked funds shows that 83% of the stolen assets, equivalent to 417,348 ETH, or roughly $1 billion, have been converted into Bitcoin and distributed across 6,954 wallets. Of this, $65 million remains elusive, awaiting further updates from OKX Web3.
Global Efforts to Mitigate the Hack’s Impact
In response to the attack, the FBI has called on exchanges and validators to cut off the Lazarus Group’s access, citing the group’s involvement in what has been described as one of the largest monetary thefts in history.