Bibit 1.4 M $ origin of compromised secure UI

The independent audit confirmed that Lazarus Group was infiltrated North Korea secure infrastructure to compromise Bitibit Etherum Newnet.
Forensic analysis conducted by Signia Laboratories and Verikain revealed that CIBIT’s security integrity remained intact despite the attack on his Etherum (El) Cold wallet 21. February.
Cripto based in Dubai export Theft over 400,000 Ethers, is worth approximately $ 1.4 billion, from her safe multiple wallet last week. The initial guess suggested that one of Sibit’s signing compromised Lazarus. However, post-mortem audit followed the causes of the safe machine for developers.
“Hot replaced Gnoz Safe UI with JS code that was aiming only to Cold Wallet” Haseeb Kureshi, General Partner in Dragonfly explained.
This means that Lazar successfully compromised a secure developer with access to the specific frontend frontend facilities, allowing bad actors to disguise malicious transactions.
She certainly recognized the findings, confirming that the bits ofby security remained intact during confirmation of the attack vectors. The protocol also stated that his internal investigation did not find vulnerabilities in safe smart contracts or source code.
After a recent incident, Tim Safewallet conducted a detailed investigation and now renovated Safewallet at Etherum Mainnet with phase crossing. Safe team fully refurbished, reconfigured all infrastructure and rotated all credentials, ensuring that the attack vector was completely eliminated.
Safe post mortem
Martin Koeppelmann, co-founder of Gnosis, the team behind Safe, thanked the Bitbit Ben Zhou executive barbecue for his leadership during the crisis. Koeppelmann emphasized the need for additional security layers and reducing the reliance on the Web2 technology to prevent similar incidents in the future.
https://crypto.news/app/uploads/2024/07/crypto-news-North-Koreas-digital-infiltration-option02.webp
2025-02-26 21:26:00