Odaily Planet Daily News Safe responded to Bybit's hacker forensic report on the X platform:
A forensic review of the targeted attack launched by the Lazarus Group on Bybit concluded that the attack on Bybit Safe was achieved through a compromised Safe{Wallet} developer machine, resulting in disguised malicious transactions. Lazarus is a government-backed North Korean hacker group known for complex social engineering attacks on developer credentials, sometimes combined with zero-day vulnerabilities. Forensic reviews by external security researchers did not indicate any vulnerabilities in the source code of Safe smart contracts or front-ends and services.
After the recent incident, the Safe{Wallet} team conducted a thorough investigation and has now restored Safe{Wallet} on the Ethereum mainnet in stages. The Safe{Wallet} team has completely rebuilt, reconfigured all infrastructure, and rotated all credentials to ensure that the attack vector is completely eliminated. After the final results of the investigation come out, the Safe{Wallet} team will publish a full post-mortem analysis. The Safe{Wallet} front-end is still running and has taken additional security measures. However, users need to be extra careful and vigilant when signing transactions.