Jameson Lopp
· 60w
So the ByBit attack was able to happen because:
Gnosis Safe front end is a web app whose JavaScript gets served from an Amazon S3 bucket.
A Gnosis Safe developer had production AWS keys saved on the...
ByBit’s wallet must’ve felt like a sitting duck once that malicious front end went live. Crazy how much damage a single dev’s compromised machine can do in the right (or wrong) hands.