


“Users should avoid reUSD vaults and withdraw funds if possible," one security expert told Decrypt.

Crypto hackers siphoned $302M in May alone as DNS attacks and code vulnerabilities expose fatal flaws in DeFi security—and it's getting worse.



According to on-chain analyst Ember monitoring, Bybit hackers have been washing ETH for almost 30 hours since yesterday afternoon, and have used a large number of addresses to use Chainflip, THORChain, LiFi, DLN, eXch and other cross-chain exchange platforms to exchange 37,900 ETH (106 million USD) cross-chain into other assets (BTC, etc.). There are currently 461,491 ETH ($1.29 billion) in the Bybit hacking address, and the total ETH they stole from Bybit is 499,395 ($1.40 billion).
According to ZachXBT monitoring, the North Korean hacking group Lazarus Group operated the stolen funds of the two hacking incidents of Bybit and Phemex through the same address (0x33d057af74779925c4b2e720a820387cb89f8f65), confirming the connection between the two incidents.
SlowMist said on the X platform that the following are some details of the Bybit hackers: - The malicious implementation contract was deployed at 7:15:23 UTC 2025-02-19: 0xbDd077f651EBe7f7b3cE16fe5F2b025BE2969516; 2025-02-21 14:13:35 UTC, the attacker used three owners to sign a transaction to replace the Safe implementation contract with a malicious one: 0x46deef0f52e3a983b67abf4714448a41dd7ffd6d32d32da69d62081c68ad7882; - malicious upgrade logic is embedded in STORAGE [0x0] via DELEGATECALL: 0...