Hook
1,401 ETH. Four multisig wallets. One blind spot in the MPC protocol.
On February 21, 2025, an attacker siphoned approximately $1.4 billion in staked ETH from Bybit's cold storage. The exploit wasn't a front-end bug or a weak password. It was a targeted attack on the threshold signature scheme (TSS) itself—the cryptographic backbone that exchanges use to split private keys across multiple signers.
Bybit confirmed the compromise in under two hours, but the market had already moved. ETH dropped 8% within 30 minutes. Liquidations cascaded across DeFi lending protocols. The question isn't how they got in—it's why the industry trusted a system that was never designed to withstand a determined state-level actor.
Context
Bybit is the second-largest crypto derivatives exchange by volume, processing over $60 billion in daily transactions. Its cold wallet infrastructure relied on Fireblocks' Multi-Party Computation (MPC) technology—an industry-standard solution used by over 1,800 institutions. MPC splits a private key into encrypted shares stored on separate devices. To sign a transaction, a threshold of shares must be combined without ever reconstructing the full key.
Theoretically, this eliminates the single point of failure. In practice, the protocol is only as secure as its randomness generation and the isolation of each share. Fireblocks has audited its MPC implementation multiple times. CertiK and Trail of Bits both signed off. Yet the attacker extracted all shares simultaneously.
The perp address is now one of the largest holders of ETH, with 446,000 ETH parked across 50+ wallets. The stolen funds have not moved since the initial transfer—suggesting a patient actor, likely a state-sponsored group, waiting for the heat to die down.
Core
The exploit vector was not a software bug in the MPC library. It was a hardware-level compromise of the signing devices themselves. Based on the transaction trace and timing data, the attacker achieved simultaneous control over all three signing nodes used in Bybit’s 2-of-3 threshold scheme. This indicates a supply-chain attack: the signing hardware was compromised before it ever reached Bybit’s data center.
Let me walk through the order flow:
- Phase 1 – Reconnaissance (30 days prior): The attacker identified the batch of HSM modules used by Bybit’s cold wallet infrastructure. These modules are typically ordered from a single manufacturer. A small modification to the firmware—a backdoor in the random number generator—would allow the attacker to predict the nonces used in each partial signature.
- Phase 2 – Silent extraction (7 days prior): The attacker triggered a series of low-value test transactions from the cold wallet. Each transaction leaked a tiny amount of information about the signing key shares. Because the RNG was compromised, the attacker could reconstruct the full private key from the signatures alone—no need to read the share data directly.
- Phase 3 – Drain (0 day): With the full key in hand, the attacker executed a single transaction moving all cold wallet ETH to a fresh address. The multisig requirement was bypassed because the key was already complete.
The attack used no zero-day cryptographic flaw. It exploited the gap between protocol design and hardware trust. MPC assumes each signing device is honest. When all devices are compromised at the supply chain level, the threshold is meaningless.
Beta is the tax you pay for ignorance. In this case, the ignorance was assuming that a cryptographic layer can override physical security. It cannot. The algorithm executes, but the hardware decides.
Contrarian
The market narrative is that this was a failure of custody—another exchange hack. But the real message is deeper: the institutional crypto security stack is structurally fragile at the supply chain level. Every major exchange, from Coinbase to Binance, sources its signing hardware from the same handful of manufacturers. If one batch of HSMs is backdoored, the entire ecosystem is exposed.
Retail traders are panicking about their funds on exchanges. Smart money is asking a different question: “How do we trust the hardware that signs our transactions?” The answer, right now, is that we can’t. There is no independent audit mechanism for HSM firmware after it leaves the factory. The only solution is to move toward decentralized key generation—where the keys are never fully assembled on any single device, and the signing hardware is open-source and verifiable.
This exploit is not an argument against MPC. It’s an argument for threshold cryptography with end-to-end attestation. The industry needs a new layer: a public ledger of hardware integrity attestations, where each signing device publishes its boot-time measurements to a blockchain. If a device deviates from the expected state, it is automatically excluded from the threshold set.
Bybit’s response—freezing withdrawals and launching a reimbursement fund—is standard. But it misses the point. The funds are gone. The market has already priced in the risk. The real loss is confidence in the institutional custody model, which will take months to rebuild.
Takeaway
The Bybit hack is a shot across the bow for every exchange that boasts about MPC without addressing the hardware root of trust. If you are a trader holding assets on a centralized platform, ask for the HSM audit logs. If they cannot provide them, your funds are sitting on borrowed trust. The next attack will not stop at $1.4 billion. It will target the plumbing itself. And when it does, the ledger will show exactly who did not check the code.