Bybit CEO Says it shifted to a zero-trust security model after the attack
BIBIBI
AT A GLANCE
Bybit CEO said that the company shifted to zero trust and diversified its wallets after the attack in 2025 while also planning to build a super app in Turkey.
Article
【Bybit CEO: Shifted to zero trust after the attack and plans to build a super app in Turkey】Bybit CEO Ben Zhou said in an interview with Turkish media outlet Fintechtime, looking back on 2025 Bybit attack, one issue was the use of a third-party service provider and the concentration of too many assets within systems related to that third party. Zhou said that since then,Bybit has comprehensively adjusted its security policies, shifted to a zero-trust model, distributed wallets across different architectures, and strengthened the separation between local and global operations to reduce the risk that a single attack could affect a large volume of assets. He also said that Bybit hopes to develop its Turkey business into a super app covering crypto trading, payments, global transfers, and more investment products.
Key points
01
Bybit CEO Ben Zhou looked back on the attack on 2025 Bybit in an interview with Turkish media outlet Fintechtime.
02
Ben Zhou said that one issue in the incident was the use of a third-party service provider and the concentration of too many assets within systems related to that third party.
03
Ben Zhou said that since then,Bybit has comprehensively adjusted its security policies and shifted to a zero-trust model.
04
Ben Zhou said that Bybit has distributed its wallets across different architectures and strengthened the separation between local and global operations.
05
Ben Zhou said that Bybit hopes to develop its Turkey business into a super app covering crypto trading, payments, global transfers, and more investment products.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The zero-trust model can be simply understood as follows: a system does not automatically trust users or services merely because they are located inside the organization; instead, it continuously verifies them. Distributing wallets and separating different businesses are intended to prevent excessive concentration of assets or systems and reduce the risk that a single attack could affect a large volume of assets. The above content consists entirely of statements made by Ben Zhou in the interview.
Why it matters to readers
These statements concern Bybit how it adjusted its asset and business security architecture, and also show its plans to expand the scope of services offered by its Turkey business. Whether the relevant measures and plans are actually implemented will affect users’ assessment of the platform’s security and business development.
When choosing a trading platform, beginners can pay attention to whether the platform relies on third-party services, whether assets are excessively concentrated, whether different businesses are separated, and whether there is verifiable information showing that security measures have been implemented.
Risks and unknowns
The evidence does not provide the original Fintechtime interview, so the relevant statements cannot yet be independently verified against the original interview.
The evidence does not provide security audits or technical materials, so the specific implementation extent and actual effectiveness of zero trust, wallet decentralization, and business isolation measures cannot be confirmed.
Related Developments
Loading event timeline…
The Turkish super app remains a future plan; the evidence does not state its launch date, implementation progress, or whether the required approvals have been obtained.
The evidence does not specify 2025 the specific circumstances, losses, or determination of responsibility concerning the attack incident that year.
Related concepts
Zero trust
This term is not in the glossary yet. Browse related concepts in the glossary.
