$1.5 billion left the building in one transaction and nobody in the room saw it happen.
Bybit, February 21, 2025. Over 401,000 ETH. Largest heist this industry has ever had.
No contract was broken. No key was stolen.
Three people looked at a screen, saw a normal transfer, and signed a different one. The Safe interface was serving JavaScript from a bucket the attackers already owned. What the signers approved and what the signers were shown had stopped being the same thing.
Lazarus. North Korea. $160 million laundered inside 48 hours, while the incident was still being written up.
Here is the part that should bother you.
Every one of them did exactly what you do. Read the screen. Confirmed on the device. Felt fine about it.
A hardware wallet protects your key. It does not protect you from a screen that is lying about what the key is signing.
Blind signing is not a bad habit. It is the ENTIRE attack surface)
Check what you sign, not where you sign it 🫡
Bybit, February 21, 2025. Over 401,000 ETH. Largest heist this industry has ever had.
No contract was broken. No key was stolen.
Three people looked at a screen, saw a normal transfer, and signed a different one. The Safe interface was serving JavaScript from a bucket the attackers already owned. What the signers approved and what the signers were shown had stopped being the same thing.
Lazarus. North Korea. $160 million laundered inside 48 hours, while the incident was still being written up.
Here is the part that should bother you.
Every one of them did exactly what you do. Read the screen. Confirmed on the device. Felt fine about it.
A hardware wallet protects your key. It does not protect you from a screen that is lying about what the key is signing.
Blind signing is not a bad habit. It is the ENTIRE attack surface)
Check what you sign, not where you sign it 🫡