GM folks 👋
In February 2025, someone at Bybit clicked Approve on a transaction that looked completely routine.
That single click cost $1.5 billion.
No smart contract was exploited. The signers were.
Over the last 18 months, more than $1.7 billion has left multisigs the same way through hidden delegatecalls, silent config changes, and thresholds that quietly became unsafe.
Every one of these was visible on-chain. Almost no one was looking.
We’re hosting a live panel on this exact problem.
The Most Expensive Click in Crypto Was a Multisig Approval
August 21 · 1:30 PM UTC
In this session we’ll cover:
- What Bybit’s signers actually saw on their screens versus what they signed
- Why audited treasuries keep getting drained anyway
- Blind signing: tooling failure or process failure?
- The 60-second pre-signing check that catches this class of attack (live demo)
- First look at early findings from our ongoing scan of the largest DAO treasuries
Featuring Abhinav and Preetam.
Free to attend. Recording will be sent to every registrant.
Register Here.
If you manage or sign multisigs, this is one of the more practical sessions we’ve run this year.
You can also try Multisig Inspector beforehand (free, no wallet connection required).
See you on Friday.
Here’s to building the future, one block at a time.
Catch you soon? 😉
See you out there,
Team QuillAudits