# Bybit detected unauthorized activity involving one of their ETH cold wallets

Source: https://x.com/Bybit_Official/status/1892965292931702929
Kiwi News: https://news.kiwistand.com/stories/Bybit-detected-unauthorized-activity-involving-one-of-their-ETH-cold-wallets?index=0x67b8b35a6b2e9dbfb326b51db3c7f2bec6b9a70b499e05a6057865e97068084be43b4056
Submitted by 183aaros.eth on 2025-02-21 UTC, 4 upvotes, 0 comments

## Summary

Bybit said it detected unauthorized activity involving one of its ETH cold wallets. According to the exchange, a transfer from its ETH multisig cold wallet to its warm wallet was manipulated by a sophisticated attack that masked the signing interface, showing the correct address while altering the underlying smart contract logic. The attacker gained control of the affected wallet and moved its holdings to an unidentified address. Bybit said its security team and blockchain forensic experts are investigating, that all other Bybit cold wallets remain secure, and that client funds are safe.

## Article

Bybit detected unauthorized activity involving one of our ETH cold wallets. The incident occurred when our ETH multisig cold wallet executed a transfer to our warm wallet. Unfortunately, this transaction was manipulated through a sophisticated attack that masked the signing interface, displaying the correct address while altering the underlying smart contract logic. As a result, the attacker was able to gain control of the affected ETH cold wallet and transfer its holdings to an unidentified address.

Our security team, alongside leading blockchain forensic experts and partners, is actively investigating the incident. Any teams with expertise in blockchain analytics and fund recovery who can assist in tracing these assets are welcome to collaborate with us.

We want to assure our users and partners that all other Bybit cold wallets remain fully secure. All client funds are safe, and our operations continue as usual without any disruption.

Transparency and security remain our top priorities, and we will provide updates asap