Bybit’s rapid action, including obtaining fresh reserves via institutional trades, has helped make liquidity returns. However, it raised questions about the wider implications for exchange security and regulatory oversight. Market sentiment remains a focus of investors after funding rates and netflows stabilize. (FT, Business Insider)
Bybit Shows Resilience With Rapid Recovery
On February 21, 2025, bybit was hacked, losing about 400,000 of ETH, worth about $1.5 billion. Hackers hijacked a vulnerable routine transfer from a cold to a warm wallet, redirecting the gains to an unknown address. Although the amount stolen was large, Bybit acted quickly and effectively.
Within 72 hours, the exchange refilled its coffers through a combination of loans, big investor deposits, and direct purchases. Among the highlighted results, Bybit locked up 157,660 ETH via OTC with crypto investment firms, including Galaxy Digital, FalconX, and Wintermute, among others. $304 million ETH purchased from several centralized and decentralized exchanges. This swift capitalization guaranteed that all client assets were backed 1:1, preserving customer confidence and operational integrity.

Market Dynamics After Hack
In just a few moments, the hack impacted Ethereum’s market dynamics. Netflows on Bybit were extremely highly volatile after the breach and dropped sharply immediately after the breach as panic sellers pulled assets from the platform. But in the wake of the exchange taking action to replenish reserves and protect client assets, netflows started to stabilize. This trend suggests that trader confidence has been restored and trading is returning to normal.
Funding rates, which are the costs associated with holding long or short positions in perpetual futures contracts, also oscillated. After the incident, funding rates went negative, indicating selling pressure and bearish market sentiment. Nevertheless, as Bybit’s reserves were replenished and the market regained confidence, funding rates started to revert, possibly signaling a turn back to bullish sentiment.

A Double-Edged Sword
The event also provided insight into the institutional acceptance of Ethereum. In data reported on February 24, 2025, Ethereum’s open interest (OI) in futures contracts on the Chicago Mercantile Exchange (CME) peaked at $3.26 billion as ETH prices traded at $2,819.69, indicating increasing speculative activity in the market.
Such an increase indicated that institutional traders were likely moving positions, perhaps hedging downside risk or looking for a price rebound. And even though the growing presence of institutions can add liquidity and depth to financial markets, they can also add complexity, especially in times of increased volatility.
The Lazarus Group Link
Investigations of the hack have led to the Lazarus Group, a North Korean hacking collective known for carrying out massive cyber thefts. It is suspected that this group is behind a number of cryptocurrency heists, thought to have taken more than £5 billion worth in cryptocurrency to help fund North Korea’s atomic weapons program. Their involvement reflects the continued security difficulties facing the cryptocurrency industry and the demand for thorough protective measures.

Security Upgrades and Market assurance
However, their immediate response to the hack, including quickly refilling those reserves and communicating openly with stakeholders, has been commendable. But this event underscores the vulnerabilities that are inbuilt into the cryptocurrency ecosystem. That means exchanges are going to have to constantly evaluate and upgrade their security measures to protect against ever-more sophisticated cyberattacks.
For investors, the incident serves as a reminder of the importance of conducting due diligence and remaining vigilant about the security posture of the platforms they interact with. As good as recovery from Bybit’s reserves is a step in the right direction, continuous efforts are necessary to restore faith in the market and rebuild the long-term sustainability of the crypto space.
$1.5 Billion Hack on Bybit: Entails and Responses; Data is available up to October 2023.
Stay connected with TurkishNY Radio by following us on Twitter and LinkedIn, and join our Telegram channel for more news.
FAQs
1. What prompted the sharp decline in the platform’s digital asset reserves?
On February 21, 2025, a hack allowed unauthorized withdrawals, emptying out the exchange of much of the stored holdings and raising question marks over the safety of exchanges.
2. How was the company able to recover its stolen digital assets?
The exchange refilled its coffers via institutional purchases, private deals, and investors making to its claim capital program, thus ensuring liquidity and reaffirming confidence in its asset management mechanism.
3. Is the trading platform safe after the breach?
User funds were secured to pave the way for a more reliable platform moving forward, including security upgrades, ongoing advanced monitoring, and increased transparency.
4. How does reserve recovery affect the stability of the market?
The return of some reserves restores investor confidence, calms the withdrawal craziness, and avoids panic sales, though market movements and regional price trends continue to exert pressure on price and volatility.
Glossary of Key Terms
Blockchain: A decentralized, digital ledger that records transactions across multiple computers while ensuring transparency, security, and immutability in cryptocurrency networks.
Cold Wallet: A way to store cryptocurrency offline, keeping it away from the threat of hacking and other unauthorized access. Used for long-term security.
Cyber Attack: An attempt to damage or steal data from a target or to manipulate funds in the target, such as a crypto exchange or wallet.
Exchange Reserves: The total quantity of digital assets held on a trading platform, showing liquidity and its capability to satisfy user withdrawals.
Funding Rate: The rate at which (or fee for) a payment is made between traders who are in a perpetual futures contract, which essentially helps to maintain balance in demand for long and short positions (i.e., whether the market is bullish or bearish) and to help keep perpetual futures prices in line with the spot price.
Liquidity: The degree to which an asset can be purchased or sold in a market without causing a drastic impact on the price. Volatility is lessened by high liquidity.
Netflow: The net flow of digital assets into and out of an exchange is indicative of investor behavior and market trends.
Security Breach: An event where unauthorized users access a system and are able to steal, lead to the loss of a fund, or disrupt the operation of crypto platforms.
Sources
Disclaimer: The following is an opinion piece and reflects the views of the author. Ethereum 2.0 is a proof-of-stake blockchain that will eventually replace the current proof-of-work system. Just days ago, the hack forced a decline in holdings, raising alarms over the stability of the market as well as investor belief.