Bybit attackers may have hacked into the official staff's computer and conducted internal network monitoring to carry out the attack

Odaily News SlowMist CISO 23pds posted on the X platform: "The attacker took away the safe owner privilege with a single forged signature attack. It is speculated that more than one macOS or Windows computer must have been controlled, and the attacker may have stayed in the intranet for some time and was able to monitor internal chats, transfer times, and other information."