{
  "schemaVersion": 1,
  "title": "Bybit investigation reference index",
  "caseUrl": "https://www.overwatchlabs.ai/crypto-case-studies#bybit",
  "compiledOn": "2026-10-06",
  "provenance": "Addresses and transaction roles are attributed to CertiK’s technical analysis. These source links are not a claim that Forensia independently reproduced every finding.",
  "limitation": "Reference index only. Not raw chain evidence, proof of ownership, or independent incident verification.",
  "source": "https://www.certik.com/blog/bybit-incident-technical-analysis",
  "records": [
    {
      "chain": "ethereum",
      "kind": "address",
      "label": "Bybit Safe wallet (reported)",
      "identifier": "0x1db92e2eebc8e0c075a02bea49a2935bcd2dfcf4",
      "explorerUrl": "https://etherscan.io/address/0x1db92e2eebc8e0c075a02bea49a2935bcd2dfcf4"
    },
    {
      "chain": "ethereum",
      "kind": "address",
      "label": "Delegatecall target (reported)",
      "identifier": "0x96221423681a6d52e184d440a8efcebb105c7242",
      "explorerUrl": "https://etherscan.io/address/0x96221423681a6d52e184d440a8efcebb105c7242"
    },
    {
      "chain": "ethereum",
      "kind": "address",
      "label": "Replacement implementation (reported)",
      "identifier": "0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516",
      "explorerUrl": "https://etherscan.io/address/0xbdd077f651ebe7f7b3ce16fe5f2b025be2969516"
    },
    {
      "chain": "ethereum",
      "kind": "transaction",
      "label": "Wallet-control change (reported)",
      "identifier": "0x46deef0f52e3a983b67abf4714448a41dd7ffd6d32d32da69d62081c68ad7882",
      "explorerUrl": "https://etherscan.io/tx/0x46deef0f52e3a983b67abf4714448a41dd7ffd6d32d32da69d62081c68ad7882"
    },
    {
      "chain": "ethereum",
      "kind": "transaction",
      "label": "ETH drain (reported)",
      "identifier": "0xb61413c495fdad6114a7aa863a00b2e3c28945979a10885b12b30316ea9f072c",
      "explorerUrl": "https://etherscan.io/tx/0xb61413c495fdad6114a7aa863a00b2e3c28945979a10885b12b30316ea9f072c"
    }
  ]
}