[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![benbybit Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::1100932506193260544.png) Ben Zhou [@benbybit](/creator/twitter/benbybit) on x 277.4K followers
Created: 2025-02-21 15:44:09 UTC

Bybit ETH multisig cold wallet just made a transfer to our warm wallet about X hr ago. It appears that this specific transaction was musked, all the signers saw the musked UI which showed the correct address and the URL was from @safe . However the signing message was to change the smart contract logic of our ETH cold wallet. This resulted Hacker took control of the specific ETH cold wallet we signed and transfered all ETH in the cold wallet to this unidentified address. Please rest assured that all other cold wallets are secure. 
All withdraws are NORMAL.

I will keep you guys posted as more develops, If any team can help us to track the stolen fund will be appreciated. 



XXXXXXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1892963530422505586/c:line.svg)

**Related Topics**
[all the](/topic/all-the)
[bybit](/topic/bybit)
[ethereum](/topic/ethereum)
[coins layer 1](/topic/coins-layer-1)

[Post Link](https://x.com/benbybit/status/1892963530422505586)