Bybit's $700M Loss Aversion Hinges on Isolated Signing Environments

Bybit's recent infrastructure upgrades have reportedly prevented over $700 million in potential losses. The move comes in response to mitigation protocols implemented after the $1.5 billion cyberattack recorded on February 21, 2025.

The attack saw malicious actors divert 401,000 Ethereum (ETH) units using a breach in the user interface of Safe{Wallet}, an external multisignature storage provider. The manipulation of the delegatecall function in the Ethereum Virtual Machine facilitated the diversion of funds to unauthorized wallets.

Bybit's technical investigation confirmed that the original exploit stemmed from a breach in the user interface of the third-party multisig wallet provider, rather than the exchange’s core infrastructure.

The platform has integrated isolated air-gapped signing environments and mandatory smart contract verification independent of web interfaces. This framework blocked successive exploit attempts that would have totaled $700 million in unscheduled capital outflows.