It was an Ethereum multisig smart contract.
In Bitcoin, multisig is simple and straightforward, easy to verify on a hardware wallet.
In Ethereum however, the simplest of smart contracts, even for ...
Yeah I figured it was Bybit, and surprised to learn that issue was in a Safe contract (Safe was considered standard multisig contract), am looking in to it deeper today.