Arkham reports that Bybit's ETH cold wallet lost roughly $1.5 billion in ETH, stETH, mETH, and cmETH after a fraudulent transaction was signed during a scheduled cold-wallet migration. The attacker moved 401K ETH, 90.4K stETH, 8,000 mETH, and 15,000 cmETH to an address labeled 0x476, then split funds across more than 40 fresh wallets and sold stETH for ETH. Bybit's CEO attributed the exploit to phishing and said only the ETH cold wallet was affected. Users still reported withdrawal delays as the exchange tightened controls after the theft.