OneKey Founder: The Key Vulnerability in Bybit's $1.5 Billion Hack Lies in the Safe Frontend The founder of OneKey mentioned in a Binance interview that the $1.5 billion theft from Bybit was not due to vulnerabilities in the Safe multisig contract, cold wallets, or Ledger itself. Instead, it stemmed from a social engineering attack on a Safe frontend engineer, which led to malicious code being implanted on the official website's frontend, specifically targeting Bybit addresses. Signers saw a normal transaction interface but unknowingly signed a transaction that used delegatecall to transfer Safe contract permissions, ultimately resulting in the asset theft. Source: BN