A recent hack involving Bybit has resulted in a loss of $1 billion, raising concerns about multisig security vulnerabilities. Safe's security team is collaborating with Bybit on an ongoing investigation and has confirmed that there is no evidence of a compromise to its official frontend. However, as a precautionary measure, Safe Wallet has temporarily paused certain functionalities. The investigation suggests that the breach may have occurred due to unauthorized access to the devices of individual signers, rather than a direct attack on the Safe platform itself. Other security firms, like Forta, are highlighting the need for enhanced security measures to prevent similar incidents in the future.
Update on Safe{Wallet} Restart The Safe{Wallet} UI displayed the correct-appearing transaction information according to ByBit, yet a malicious transaction that had all valid signatures was executed onchain. Our investigation so far shows: • No codebase breach found: The Safe…
We’re closely monitoring the Bybit security incident. Initial reports suggest that the devices of individual signers were hacked (similar to the Radiant case) and that Safe and its frontend were not compromised. To ensure your multisig funds are safe from this type of attack,…
Secure Your Multisig Signing Workflows — Seriously, You Can’t Wait. Let’s cut to the chase: the Bybit breach today and Radiant Capital’s multisig hack last year aren’t just oops moments. Unauthorized transactions slipping through? That’s a wake-up call. Time to lock things down.… https://t.co/H3IYQ8iptC