Bybit and Glassnode Analyze Resilience Post-Lazarus Hack

The February 2025 hack of Bybit, orchestrated by the infamous Lazarus group, tested the resilience of digital asset markets like never before. According to Glassnode, the hack resulted in the loss of $1.4 billion in Ethereum (ETH), marking it as one of the largest centralized exchange breaches to date. This incident served as a critical stress test for the cryptocurrency ecosystem, affecting major assets such as Bitcoin (BTC), Ethereum (ETH), and Solana (SOL).

Market Impact and Recovery

The hack triggered significant market disruptions, including large-scale withdrawals and price volatility. Despite these challenges, the market displayed resilience, a testament to its growing maturity. The joint report from Glassnode and Bybit offers a comprehensive analysis of how the market responded, utilizing on-chain metrics and exchange data to provide insights into investor behavior and exchange dynamics.

Exchange Dynamics and Investor Behavior

Following the breach, Bybit’s ETH reserves plummeted from 779,000 to 236,000 ETH. However, the exchange’s rapid response facilitated a swift recovery, restoring 94% of the lost reserves. This recovery was crucial in maintaining user trust and showcased the operational resilience of crypto platforms. By June 2025, open interest in derivatives across Ethereum, Bitcoin, and Solana not only rebounded but exceeded pre-hack levels, indicating renewed investor confidence.

Liquidity and Market Share

While Bybit’s market share in derivatives was temporarily impacted, it demonstrated structural soundness. The exchange’s open interest dominance, which initially dropped from 25% to 18%, recovered to approximately 21%. Similarly, perpetual volume dominance, after falling from 17% to 14.3%, rebounded to 16%. Despite these shifts, trade volumes remained stable, with daily averages of $10 billion for BTC and $1.7 billion for SOL, highlighting sustained trust in Bybit’s trading infrastructure.

Liquidity Stress and Recovery

The incident led to a temporary decline in market liquidity, characterized by widened bid-ask spreads and reduced market depth. However, by mid-Q2 2025, these metrics normalized, with market depth surpassing pre-hack levels. This rapid recovery underscores the resilience of liquidity providers and the market’s ability to withstand extreme stress without cascading failures.

The full report by Glassnode and Bybit offers an in-depth examination of these dynamics, providing valuable insights for strategists, risk managers, and institutional investors. It highlights the structural resilience of the crypto market and its capacity to recover from significant disruptions. For a detailed understanding of the event and its implications, the report is available on Glassnode.

Image source: Shutterstock