CZ talks about recent security incidents: Proposing a suspension of withdrawals is a prudent move, Bybit CEO makes the best decision based on the situation
Golden Finance reported that Binance founder Changpeng Zhao (CZ) expressed a detailed view on recent hacking incidents, "We have observed a rule that hackers can steal a large number of cryptocurrencies from multiple signature 'cold storage' solutions, such as Bybit, Phemex, WazirX Exchanges have encountered similar situations. In recent Bybit cases, hackers were able to let the front-end user interface show legitimate transactions, while the actual signature points to another transaction. For other cases, based on limited information, it seems to be adopted Similar techniques.
What is even more worrying is that the affected exchanges use different providers of multi-signature solutions. The hacker group Lazarus Group demonstrates extremely advanced and extensive penetration. It is still unclear whether the hackers have successfully penetrated multiple signature devices, either on the server side, or both have been compromised.
Some people questioned my previous view that it would recommend suspending withdrawals as a standard safety precaution (a tweet I posted on the shuttle bus to the airport). My original intention is to share a practical method based on experience and observation, but there is no absolute right or wrong in this approach. My guiding principle is always to tend to the safer side. After any security incident, all operations should be paused to ensure that we fully understand what happened, how hackers penetrate the system, which equipment was compromised, and after the triple check ensures safety, then resume operations.
Of course, the suspension of withdrawals may trigger more panic. In 2019, we paused our withdrawal for a week after a major $40 million hack. When we resume withdrawal (and recharge), the recharge amount actually exceeds the withdrawal amount. This is not to say that this approach is better, each situation is different, and it requires judgment. I tweeted to share possible effective practices and intended to express support in a timely manner. I believe Ben made the best decision based on the information he has.
Ben maintained transparent communication and a calm attitude when dealing with this challenging situation. This is in stark contrast to other CEOs who lack transparency, such as WazirX, FTX, etc.
The cases mentioned here are all different. FTX is a fraud, and as for WazirX, I won't comment as the lawsuit is underway.
Most importantly, we should never take safety for granted. It is important to know security knowledge so that you can choose the right tools for your needs. To do this, I will share an article written a few years ago. Although somewhat outdated, the basic concept still applies. Stay safe (SAFU)! ”