The Slow Fog team issued an article to add some details about the hacking attack on Bybit. The attacker deployed a malicious implementation contract. Then the attacker signed the transaction through three owners, replacing Safe’s implementation contract with a malicious contract, and using the backdoor functions in the malicious contract sweetETH and sweetERC20 cleared hot wallet funds.
read the original