Why did the Bybit hacker favor ETH? High value or high liquidity?

The hackers' preference for ETH in the Bybit hack is attributed to its high value and liquidity, providing lucrative targets and quick realization channels.

Feb 22, 2025 at 03:30 pm

On the evening of February 21st, Beijing time, the cryptocurrency trading platform Bybit was hacked, and over 400,000 ETH and stETH with a total asset value of over $1.5 billion (approximately 10.8 billion yuan) were transferred to unknown addresses. This hacking incident is the largest - scale theft in history. Security agencies have confirmed that the attacker is the notorious hacker group Lazarus Group, which stole $200 million worth of Bitcoin by hacking into a South Korean exchange in 2017. In this attack, why do hackers have a special preference for ETH? Is it because of its high value or high liquidity?

High Value: The Unique Status of ETH

In terms of market price, the price of ETH has always been at a high level. With the development of the cryptocurrency market, the value of ETH has also been constantly rising. This makes ETH an extremely attractive target for hackers. Once a large amount of ETH is successfully stolen, hackers can obtain huge profits by selling these assets. Taking the Bybit hacking incident as an example, the stolen over 400,000 ETH is worth over $1.5 billion, which is undoubtedly a huge fortune.

In addition, the core role of ETH in the cryptocurrency ecosystem also increases its value. Many decentralized applications (dapps) and smart contracts are built on the Ethereum platform, and ETH is the foundation for the operation of these applications and contracts. Therefore, controlling a large amount of ETH is equivalent to controlling a part of the cryptocurrency ecosystem, which is very attractive to hackers.

High Liquidity: The Key to Quick Realization

Besides high value, the high liquidity of ETH is also an important reason why hackers choose it. Liquidity refers to the ability of an asset to be bought and sold quickly at a reasonable price. In the cryptocurrency market, ETH has a very high liquidity, which means that hackers can exchange the stolen ETH for other assets or directly realize it into cash in a short time.

The high liquidity of ETH is mainly reflected in the following aspects:

Extensive trading pairs: On most cryptocurrency exchanges, ETH has a rich variety of trading pairs and can be traded with Bitcoin, stablecoins, and various other cryptocurrencies. This allows hackers to flexibly choose which asset to exchange ETH for according to market conditions to maximize their interests.

A large number of trading platforms: ETH can be traded on numerous cryptocurrency trading platforms around the world, whether they are centralized exchanges or decentralized exchanges. This provides hackers with more options and facilitates their operations on different platforms to avoid being tracked.

Active market participants: Ethereum has a large user base and active market participants, which makes the trading of ETH very frequent. In such an active market environment, hackers can easily sell the stolen ETH without causing too much impact on the market price.

Taking the previous paths of Lazarus Group in handling the stolen funds as an example, they generally take three steps to "dispose" of the obtained stolen funds: The first step is to exchange all ERC20 (including liquid - derivative tokens such as stETH) for ETH; the second step is to exchange ETH for BTC; the third step is to gradually convert BTC into fiat currency through Asian exchanges. During the whole process, the high liquidity of ETH enables the stolen funds to be quickly and smoothly converted, providing convenience for hackers to finally realize the funds.

The Dual Temptation of High Value and High Liquidity

Overall, the reason why hackers on Bybit have a special preference for ETH is both its high value and high liquidity. The high value makes ETH a "lucrative target" in the eyes of hackers, and the high liquidity provides hackers with a way to quickly realize the funds. The two complement each other and jointly constitute the great attraction of ETH to hackers.

In addition, the smart contracts and decentralized applications of Ethereum also provide hackers with more opportunities and means of attack. In this Bybit hacking incident, hackers successfully controlled the ETH cold wallet by manipulating the smart - contract logic of the cold wallet, thus achieving the theft of a large amount of ETH. This also reminds the cryptocurrency industry that while developing, it must strengthen security protection and guard against various possible attacks.

This Bybit hacking incident has once again sounded the security alarm for the cryptocurrency market. For investors and cryptocurrency exchanges, it is necessary to attach more importance to asset security, strengthen security protection measures, and improve the ability to respond to hacker attacks. At the same time, regulatory authorities should also strengthen the supervision of the cryptocurrency market, standardize the market order, and protect the legitimate rights and interests of investors. Only in this way can the healthy and stable development of the cryptocurrency market be promoted.

Disclaimer:info@kdj.com

The information provided is not trading advice. kdj.com does not assume any responsibility for any investments made based on the information provided in this article. Cryptocurrencies are highly volatile and it is highly recommended that you invest with caution after thorough research！

If you believe that the content used on this website infringes your copyright, please contact us immediately (info@kdj.com) and we will delete it promptly.

Fear & Greed Index

Trade Now

Biggest Gainers

BAN

$0.1542

109.27%

Trade Now
DOGE

$0.1649

67.48%

Trade Now
AVAIL

$0.1172

45.56%

Trade Now
TST

$0.1139

39.18%

Trade Now
PNUT

$0.2034

37.04%

Trade Now
BTG

$4.7779

34.46%

Trade Now