• Limonene@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      10
      ·
      5 hours ago

      They’ll just roll back the blockchain. Ethereum is a centrally controlled cryptocurrency, though its fans claim otherwise. It’s been rolled back before.

      • nectar@lemmy.world
        link
        fedilink
        English
        arrow-up
        14
        arrow-down
        1
        ·
        4 hours ago

        This is either a person who hasn’t followed ETH since 2016 or is intentionally spreading misinformation.

        It HAS been rolled back once, when the blockchain was in its infancy. But to say that it is still “centrally controlled” suggests having no idea what has happened in the 9 years since.

  • Darkcoffee@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    25
    arrow-down
    2
    ·
    6 hours ago

    I’m so glad I have no crypto of any kind. It’s the wild west with no savings insurance, so once it’s gone, it’s gone.

      • dhork@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        ·
        2 hours ago

        Do I understand this correctly, then, that this was some sort of MITM attack where valid requests to the multisig parties were replaced by malicious code while still appearing to be valid to the signers? That must be an inside job.

        And this is the first time I have heard the word “musked” in this context…

        • x00z@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          51 minutes ago

          Do I understand this correctly, then, that this was some sort of MITM attack where valid requests to the multisig parties were replaced by malicious code while still appearing to be valid to the signers? That must be an inside job.

          I have no idea. I guess they’ll release a lot more info regarding this in the next few days.

          And this is the first time I have heard the word “musked” in this context…

          I think his English isn’t good looking at the rest of the message. Might be “masked” instead.

    • subversive_dev@lemmy.ml
      link
      fedilink
      English
      arrow-up
      30
      ·
      edit-2
      6 hours ago

      My speculations:

      • “insecure from the start” - as in , the wallet was never that “cold”

      • with that amount of money, it’s easy to imagine an “insider threat”

      • the hackers could have gotten lucky and struck right when the company was doing legitimate operations on the wallet

      • but probably it’s a towering mountain of incompetence, composed of the elements above and more

    • FaceDeer@fedia.io
      link
      fedilink
      arrow-up
      10
      ·
      5 hours ago

      It’s a common misconception that a “cold wallet” is offline. It’s still on the blockchain like any other wallet, it’s just the keys that aren’t on any network-connected computer.

      It appears that in this case hackers managed to trick Bybit employees into entering the keys into a fake UI that gave the hackers access to them.

      • Kualk@lemm.ee
        link
        fedilink
        English
        arrow-up
        6
        ·
        4 hours ago

        That’s room temperature wallet. It was used while claiming asset unused.

        It is not cold storage anymore.

    • golli@lemm.ee
      link
      fedilink
      English
      arrow-up
      5
      ·
      5 hours ago

      What I don’t quite understand is how there is 1.5 billion in a single wallet. Or how are these things structured?

      This article puts their total assets under management at $15.7b, which are held in different cryptocurrencies with ethereum at just above $5b.

      So I am wondering how they have more than 1/6 of their Ethereum in a single wallet or were these multiple that were connected and got compromised through the same vulnerability? How expensive is it to have more individual wallets? Would it not be feasible to have it split in something like $100m chunks? Or any other more moderate size.

    • dhork@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      6 hours ago

      Well, either it wasn’t as offline as they all thought, or someone pulled off an epic inside job.