On February 21, 2025, hackers stole approximately $1.5 billion worth of Ethereum (401,347 ETH) from cryptocurrency exchange Bybit's cold wallet. This became the largest theft in crypto history.
The attackers injected malicious JavaScript code into the Safe{Wallet} UI through a compromised developer machine, intercepting a routine transaction.
The FBI officially attributed the theft to North Korea's Lazarus Group on February 26, 2025. The stolen assets were rapidly converted to Bitcoin and dispersed across thousands of addresses.