---
id: 6450
title: "The $1.5B Bybit Hack & How OSINT Led to Its Attribution"
source_domain: netlas.io
source_url: "https://netlas.io/blog/bybit_hack/"
published_at: "2025-08-06T00:00:00Z"
tags: ["cloud", "supply-chain", "cryptocurrency", "osint", "attribution", "bybit", "lazarus"]
phying_url: "https://phying.com/item/6450"
lang: en
---

# The $1.5B Bybit Hack & How OSINT Led to Its Attribution

## Summary

Reconstructs the record-breaking $1.5B Bybit hack: how Lazarus social-engineered signers, hijacked an AWS token and injected code in Safe{Wallet}, and how OSINT aided attribution.

## Intelligence Metadata

- **Sources:** netlas.io
- **Published:** 2025-08-06T00:00:00Z
- **Original:** https://netlas.io/blog/bybit_hack/
- **Phying News:** https://phying.com/item/6450