Safe acknowledged that the Bybit hack resulted from a compromised Safe{Wallet} developer machine, confirming the findings of Verichains and Sygnia

Claim

Name

Safe acknowledged that the Bybit hack resulted from a compromised Safe{Wallet} developer machine, confirming the findings of Verichains and Sygnia

Types

Quotes that support claims

As for Safe itself—it’s been a rough day for public relations so far. In a statement posted to X on Wednesday, the company acknowledged Verichains’ and Sygnia’s findings, saying the hack did stem from a “compromised Safe Wallet developer machine.”

Safe, which was spun off from Gnosis, is the largest multi-signature wallet provider in DeFi, and released a statement from its Safe{Wallet} arm stating, “This attack targeted to the Bybit Safe was achieved through a compromised Safe{Wallet} developer machine resulting in the proposal of a disguised malicious transaction.”Safe clarified that the exploit compromised a single wallet and that Safe’s smart contracts remain unaffected.

Safe, the developer of the SafeWallet multisignature product used by Bybit, has released a short post-mortem update explaining the root cause of the recent Bybit hack — a compromised developer machine. The announcement prompted a critical response from Binance co-founder Changpeng “CZ” Zhao.

Safe also issued a statement saying that "Safe smart contracts [were] unaffected, an attack was conducted by compromising a Safe {Wallet} developer machine which affected an account operated by Bybit." It also pointed out that a "forensic review of external security researchers did NOT indicate any vulnerabilities in the Safe smart contracts or source code of the frontend and services."

Referenced by

Summary

Crypto news