It was an Ethereum multisig smart contract.
In Bitcoin, multisig is simple and straightforward, easy to verify on a hardware wallet.
In Ethereum however, the simplest of smart contracts, even for a simple multisig set up, are harder to verify on a hardware wallet, creating more opportunities for such vulnerabilities.
Here is an article with more details about the hack:
https://www.ledgerinsights.com/bybit-hack-phishing-involved-plus-how-to-prevent-similar-hacks/
/ BitcoinMajlis
npub1f7…tm25c
2025-02-26 12:47:05
in reply to nevent1q…q0gv
Author Public Key
npub1f7n47xajdxnvrespa939hvcta6ys362k4sy3yjd2e2ea6dcghpvs2tm25cPublished at
2025-02-26 12:47:05Event JSON
{
"id": "0c76aedfbda0600f2e10100f48dc56821049b16ed66038c6daf57aedc189fd1a",
"pubkey": "4fa75f1bb269a6c1e601e9625bb30bee8908e956ac091249aacab3dd3708b859",
"created_at": 1740574025,
"kind": 1,
"tags": [
[
"p",
"4fa75f1bb269a6c1e601e9625bb30bee8908e956ac091249aacab3dd3708b859"
],
[
"p",
"e0921d610ee655396cfac6c9907b6ad11f3a1dde5770029e1284e6cae0fe7bd5"
],
[
"p",
"3879d0e99adffcb2bfe7c93d2dfa1e9b1f1dbf6a3e49023a5085e7e751eabf26"
],
[
"e",
"95c4c620a19a3a76231c25ae69cbde6ac768880a6bd2f4c6199f6f87f9dfe884",
"wss://nostr.oxtr.dev",
"reply",
"3879d0e99adffcb2bfe7c93d2dfa1e9b1f1dbf6a3e49023a5085e7e751eabf26"
],
[
"e",
"9c3f2b3e632b6e18d68534eb64a6dd4326b0ea9400c6838bf119b2da650527f6",
"wss://bitcoiner.social",
"root",
"e0921d610ee655396cfac6c9907b6ad11f3a1dde5770029e1284e6cae0fe7bd5"
]
],
"content": "It was an Ethereum multisig smart contract.\n\nIn Bitcoin, multisig is simple and straightforward, easy to verify on a hardware wallet. \n\nIn Ethereum however, the simplest of smart contracts, even for a simple multisig set up, are harder to verify on a hardware wallet, creating more opportunities for such vulnerabilities.\n\nHere is an article with more details about the hack:\n\nhttps://www.ledgerinsights.com/bybit-hack-phishing-involved-plus-how-to-prevent-similar-hacks/",
"sig": "9e3b857738cfc502d8eddeb0f15ba2699f0762b8cfac43686deb75e01fb24ca1e7ed6a0f70f79fb2fa172ea1a132d1dcf8a7fdfd3bf20b8c64e68d9716bb0cb8"
}