Bybit CEO Ben Zhou was quick to try to reassure customers that “Bybit is Solvent even if this hack loss is not recovered, all of clients assets are 1 to 1 backed, we can cover the loss.”14 Many customers weren’t satisfied with his promises,b and they withdrew a combined more than $5.5 billion from the exchange after the theft was announced. Bybit was able to satisfy the withdrawals, and has since said they “closed the gap” in ETH supplies to back client assets through a combination of OTC purchases and loans from exchanges and crypto VCs.15
The lack of skepticism around Bybit’s solvency is a little odd to me. For one, it’s clear that the assets were not 1:1 backed at the time of Zhou’s tweet, given that 400,000 ETH had just been stolen. Bybit later issued a press release boasting that they were “Fully Backed Within 72 hours”, acknowledging themselves that customer balances weren’t fully backed for those three days.16 Furthermore, much of the “gap” has been papered over with loans rather than the firm’s own assets. As we saw with Genesis’s $1.1 billion “loan” to try to cover losses in 2022 [I74], a company’s ability to secure a loan to cover a hole does not magically make that hole disappear. While Bybit’s proof-of-reserves demonstrates that the company now holds a sufficient quantity of ETH to back customer balances, these reports do not evaluate Bybit’s ability to repay the loans or provide any information about the terms of those loans.