Is Bybit safe?
MiCA authorized Evidence 100%
What the sources say
Where the points come from
Incidents and regulator actions
Security incidents
- 2025-02-21 About $1.5B in ETH and stETH (over 400,000 ETH) moved from one of Bybit's offline wallets to an unidentified address; attributed by Elliptic and Arkham to Lazarus Group. Outcome: CEO stated client assets are 1:1 backed and the loss could be covered; Bybit said it would use bridge loans if needed. No user withdrawals loss verified independently. source
Regulator and court actions
- 2024-10-22 De Nederlandsche Bank (DNB), Netherlands: Fine on Bybit Fintech Limited for offering crypto services in the Netherlands without Wwft registration until September 2023. Outcome: EUR 2,250,000 fine, reduced because Bybit moved Dutch customers to a local partner; published 30 Oct 2024. Official source Fine or settlement of about 1M or more source
- 2025-01-31 FIU-IND, India: Penalty under Prevention of Money Laundering Act for operating without registration. Outcome: INR 9.27 crore (about USD 1.06M) fine; Bybit registered with FIU. Press report Fine or settlement of about 1M or more source
What we could not verify
OAM register not read directly (403); Bybit OAM status unclear. Hack attribution to Lazarus is from Elliptic/Arkham per Security Affairs, not confirmed there; whether any customer lost funds not independently verified. Bybit EU maker/taker, perpetual availability for EEA, staking, withdrawal terms not verified. Bybit own PoR page unreadable; PoR date from press release. Other regulator actions (e.g. other countries) not exhaustively searched.
Facts are as of 7 Oct 2026. Searches are not exhaustive. If something here is wrong or out of date, send a correction with a source: corrections policy. Education only, not investment advice.
Sources
- [1] ESMA interim MiCA CASP register (CSV) accessed 2026-10-07
- [2] AMBCrypto: Bybit phases out Global services for EEA users accessed 2026-10-07
- [3] Security Affairs: Bybit heist accessed 2026-10-07
- [4] DNB: fine for Bybit Fintech Limited accessed 2026-10-07
- [5] AAP/Bybit press release: Latest PoR accessed 2026-10-07
- [6] Cointelegraph: Bybit FIU India accessed 2026-10-07
- [7] Bybit trading fee structure accessed 2026-10-07
- [8] Finanzadigitale: lista exchange OAM accessed 2026-10-07
- [9] Hacken: Bybit PoR case study accessed 2026-10-07
Common questions about Bybit
Is Bybit safe?
We do not give a yes or no, because safety depends on what you need to protect and on facts that change. In our Edition 0 audit Bybit scored 78 out of 100 with 100% of the evidence verified. We found 1 security incident in the last five years and 2 regulator or court actions that were not dismissed. Read the sources on this page before you deposit.
Does Bybit publish proof of reserves?
Yes. Auditor: Hacken. Latest date we found: 2026-05-27. Compare all exchanges: proof of reserves compared.
Is Bybit authorized under MiCA?
Yes. Authorized by Austrian Financial Market Authority (FMA) on 2025-05-28. Entity: Bybit EU GmbH (LEI 5299005V5GBSN2A4C303). See all exchanges: MiCA authorized exchanges.
What are Bybit's spot trading fees?
Base tier spot fees are 0.1% maker and 0.1% taker.
Can Italian residents use Bybit?
Accepts Italian residents: Yes. The registry check is pending.