North Korea's Unprecedented $1.5 Billion Crypto Heist Exploited Human Element, Not Code

North Korean hackers have executed the largest cryptocurrency theft in history, draining $1.5 billion from Dubai-based exchange Bybit by compromising its multisignature cold wallet system. The attackers stole over 400,000 ethereum and staked ethereum coins without exploiting code vulnerabilities or infrastructure.

Security researchers from Elliptic identified North Korean signatures in the subsequent laundering operations, consistent with the nation's ongoing cryptocurrency theft operations that fund its weapons programs. Investigators determined the hackers manipulated the user interfaces on multiple Bybit employees' devices simultaneously, tricking authorized personnel into approving what appeared to be legitimate transactions. This sophisticated attack 'altered the smart contract logic and masked the signing interface,' according to Bybit's disclosure.

'The Bybit hack has shattered long-held assumptions about crypto security,' noted researchers at Check Point. 'No matter how strong your smart contract logic or multisig protections are, the human element remains the weakest link.'

Read more of this story at Slashdot.