Incident All ledgers
Bybit: $1.40bn
Bybit lost $1.40bn on 21 February 2025. Ranked 3rd of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 21 February 2025
- Lost
- $1.40bn
- Returned or repaid
- $1.40bn
- Target
- CEX
- Category
- Social Engineering
- Method
- Signer Phishing
- Chains
- Ethereum
On February 21, 2025, Lazarus Group phished a Bybit DevOps engineer and spoofed the Safe interface, leading signers to blind-sign a disguised transaction that installed a rogue hot-wallet policy. Roughly $1.4-1.5 billion in ETH and other assets was drained.
Against the ledger
- It ranks 3rd of the 1,272 incidents with a known loss, and 1st in 2025.
- It accounts for 94.8% of the $1.48bn in known losses in February 2025.
- 61 incidents in the ledger are classified as Social Engineering, for $3.12bn in total. This one is 44.9% of that.
- $1.40bn is recorded as returned or repaid, 100.0% of the amount taken.
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 12 Nov 2022 | FTX | $450.0m | CEX | Phishing | — |
| 31 May 2024 | DMM Bitcoin | $305.0m | CEX | Phishing | $305.0m |
| 18 Jul 2024 | WazirX: India | $234.9m | CEX | Signer Phishing | — |
| 20 Sept 2022 | Wintermute | $160.0m | Other | Phishing | — |
| 10 Nov 2023 | Poloniex | $126.0m | CEX | Malware | — |
All failures in 2025 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Bybit, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/bybit-2025-02-21/. How this is built