🚀 Bybit Suffers $1.5 Billion Loss in Multisig Wallet Attack
#Bybit #MultisigWallet #SecurityBreach #Cryptocurrency #SlowMist #CyberAttack #BlockchainSecurity #CryptoLoss #SocialEngineering #SafeWallet
According to PANews, the security team at SlowMist has reported that on February 21, Bybit's multisignature wallet was compromised, resulting in the theft of nearly $1.5 billion through a 'legitimate signature' transaction. The attackers employed social engineering tactics to gain multisignature access and used the delegatecall function of the Safe contract to insert malicious logic, bypassing the multisignature verification process to transfer the funds.
The Safe wallet introduced a Safe Guard mechanism in version 1.3.0, which allows for detailed security checks on transactions, such as whitelist verification and restrictions on high-risk operations. However, Bybit was using version 1.1.1, which did not include this critical feature. The SlowMist team suggested that if Bybit had upgraded to version 1.3.0 and properly configured the Guard mechanism, the loss might have been prevented.#Bybit #MultisigWallet #SecurityBreach #Cryptocurrency #SlowMist #CyberAttack #BlockchainSecurity #CryptoLoss #SocialEngineering #SafeWallet
🚀 Safe{Wallet} Identifies North Korean Hackers in Recent Cyber Attack
#SafeWallet #NorthKoreanHackers #CyberAttack #TraderTraitor #MFA #CyberSecurity #AWS #Cryptocurrency #TransactionMonitoring #Web3 #SecurityMeasures #UserSafety
According to PANews, Safe{Wallet} has announced significant progress in its joint security investigation with Mandiant, now part of Google Cloud. The investigation confirmed that the February 21 attack was orchestrated by the North Korean hacker group TraderTraitor (UNC4899), known for targeting the cryptocurrency industry. The hackers infiltrated Safe{Wallet} developers' computers and bypassed multi-factor authentication (MFA) by hijacking AWS session tokens to gain critical access.
Safe{Wallet} emphasized that while the attack had some impact, the smart contracts remained intact. The system has been fully reset, and enhanced security measures have been implemented, including:
- **Infrastructure Reset**: All credentials have been regenerated, clusters reset, keys and secret information updated, and container images redeployed.
- **External Access Restriction**: External access to trading services has been temporarily blocked, allowing only internal communication, with strengthened firewall rules.
- **Malicious Transaction Detection Upgrade**: In collaboration with Blockaid, transaction monitoring has been enhanced, adding risk markers for Safe account master control upgrades.
- **Real-Time Monitoring Enhancement**: Logging and threat detection capabilities have been improved for quicker response to security incidents.
- **Pending Transaction Clearance**: All pending transactions in the database have been cleared to prevent potential security risks.
- **UI and Security Verification Tool Optimization**: Safe Utils has been introduced as a third-party transaction verification tool, with plans to offer a fully IPFS-hosted version of Safe{Wallet}.
Safe{Wallet} urges the Web3 ecosystem to collectively address the increasingly complex security threats and enhance transaction verification tools to improve user safety. The company has released detailed transaction verification guidelines and plans to further optimize user experience to mitigate potential risks.#SafeWallet #NorthKoreanHackers #CyberAttack #TraderTraitor #MFA #CyberSecurity #AWS #Cryptocurrency #TransactionMonitoring #Web3 #SecurityMeasures #UserSafety
🚀 Safe Wallet Services Fully Restored After Security Incident
#SafeWallet #SecurityIncident #ByBit #MultiSignatureWallet #SafeAPI #Blockchain #CryptoNews
According to BlockBeats, Safe has announced that its Safe{Wallet} services have resumed normal operations as of March 7. All networks and Safe API are now fully repaired and available for use. Previously, Safe had temporarily suspended some functions and conducted a comprehensive security review following a hacking incident involving ByBit, where Safe serves as a multi-signature wallet service provider.#SafeWallet #SecurityIncident #ByBit #MultiSignatureWallet #SafeAPI #Blockchain #CryptoNews
🚀 Safe Wallet Integrates Morpho Vaults for Euro-Based Yields
#SafeWallet #MorphoVaults #EuroBasedYields #EURCV #SociétéGénérale #MiCARegulations #DeFi #SteakhouseFinancial #EuroStablecoin #DeFiYield
Safe Wallet has announced the integration of Morpho vaults, enabling users to earn yields in euros through EURCV, a euro stablecoin issued by Société Générale. According to NS3.AI, this stablecoin complies with MiCA regulations, ensuring a secure and regulated environment for users. The vault is accessible directly within Safe Wallet and is managed by Steakhouse Financial, a DeFi research firm that oversees risk parameters. This development represents a significant advancement in offering compliant euro-denominated DeFi yield opportunities to users.#SafeWallet #MorphoVaults #EuroBasedYields #EURCV #SociétéGénérale #MiCARegulations #DeFi #SteakhouseFinancial #EuroStablecoin #DeFiYield
🚀 Tempo and Safe{Wallet} Integrate Programmable Multi-Signature Accounts for Blockchain Payments
#Tempo #SafeWallet #Blockchain #MultiSignature #Payment #FinancialInstitutions #PaymentServiceProviders #Fintech #Stablecoins #EVM #TransactionFees #CryptoSecurity #SmartAccounts
Tempo has integrated with Safe{Wallet} to introduce programmable multi-signature accounts into blockchain infrastructure aimed at payment scenarios. According to Foresight News, this integration targets financial institutions, payment service providers, and fintech platforms, enabling teams to manage on-chain treasuries with fees priced in stablecoins, with standard TIP-20 token transfer fees below $0.001.
Following the integration, users can initiate transactions through Safe, which are reviewed by designated signatories and executed upon reaching the required multi-signature threshold. Fees are paid directly in USD stablecoins, eliminating the need to hold or manage native Gas tokens. Tempo also supports session keys for delegated signing, offering automated transaction strategies for periodic or rule-based execution, and includes protocol-level account abstraction primitives without relying on external bundlers or paymasters. Tempo is compatible with EVM, allowing existing Safe modules, guards, and tools to be deployed directly, with Safe factory contract addresses consistent with Ethereum.
Currently, Safe{Wallet} secures over $60 billion in assets and manages more than 8 million smart accounts across more than 25 networks.#Tempo #SafeWallet #Blockchain #MultiSignature #Payment #FinancialInstitutions #PaymentServiceProviders #Fintech #Stablecoins #EVM #TransactionFees #CryptoSecurity #SmartAccounts