After the ~$1.5B hack, Bybit borrowed about $280M in ether from crypto industry peers to help process 350,000 customer withdrawal requests over 10 hours
Context & Ripple Effects
The incident moved quickly from reported suspicious outflows and a compromised cold Ethereum wallet to a customer withdrawal surge. Related coverage estimated more than $4 billion of withdrawals after the breach, making liquidity management as immediate a problem as the asset loss itself.
The scale also stands apart from prior exchange breaches: coverage characterized the incident as the largest crypto heist on record. The peer borrowing shows how industry relationships can become an emergency operational backstop when confidence breaks.
First-order effects
- Bybit gained ether liquidity to continue processing customer withdrawals during the post-hack rush, rather than pausing access while it sourced funds.
- The industry peers that lent ether became part of Bybit's immediate crisis response, tying their capital to the exchange's ability to meet withdrawal demand.
Second-order effects
- The episode raises the importance of readily available liquidity and inter-exchange credit lines for centralized exchanges facing sudden withdrawals, especially after a security failure.
- Customers and counterparties have a concrete test case for distinguishing an exchange's stated reserves from its ability to deliver assets under stress; Bybit had already faced a reported $4 billion-plus withdrawal wave.
Third-order effects
- If peer-supported liquidity becomes a recurring response to exchange crises, crypto trading venues may operate more like an interconnected financial network, with one platform's security failure transmitting funding and confidence pressure to others.
- The case reinforces the sector's crypto legitimacy gap: resilience will increasingly be judged on custody controls, withdrawal capacity, and transparency during a crisis, not merely on normal-market operation.
The trend: Major crypto breaches are increasingly testing not only custody security but also the emergency liquidity networks that determine whether customers can exit an exchange during a confidence shock.