Bybit detected unauthorized activity involving one of their ETH cold wallets

Bybit said it detected unauthorized activity involving one of its ETH cold wallets. According to the exchange, a transfer from its ETH multisig cold wallet to its warm wallet was manipulated by a sophisticated attack that masked the signing interface, showing the correct address while altering the underlying smart contract logic. The attacker gained control of the affected wallet and moved its holdings to an unidentified address. Bybit said its security team and blockchain forensic experts are investigating, that all other Bybit cold wallets remain secure, and that client funds are safe.