Cryptocurrency Exchange Bybit has published a forensic medical review on last week’s $ 1.5 billion hack, which revealed that its systems had not been infiltrated and that the question seemed to have stemed from compromised safe wallet infrastructure.
BYBIT concluded from the review that the “credentials for a secure developer were compromised” which allowed Lazarus Hacking Group to have unauthorized access to the secure wallet and then deceive BYBT staff to sign the malicious transaction.
However, a person who is familiar with the case, Coindesk, told that despite the wallet’s infrastructure compromised by social engineering, the hack would not have been possible, Bybit had not “blindly signed” the transaction. The term refers to a mechanism where a smart contract transaction is approved without extensive knowledge of its content.
SAFE also issued a statement that “secure smart contracts [were] Not affected, an attack was made by compromising on a secure wallet developing machine that affected an account operated by Bybit. “It also pointed out that a” forensic review of external security researchers did not indicate any vulnerabilities in the safe smart contracts or source code for front end and services. “
The apparent back and forth between both companies reflects it from Wazirx and Liminal Custody, which accused each other after a $ 230 million utilization last July.
On-Chain data analyzed by Zachxbt shows that Lazarus is trying to launder the stolen funds in which 920 wallets are currently occupied with the poorly achieved winnings. The funds may have inadvertently come with stolen funds from hacks aimed at Phemex and Poloniex, and connects the Lazarus group to all three.
Read more: Bybit declares ‘War against Lazarus’ as it shit effort to freeze stolen funds
