Bybit CEO Ben Zhou says exchanges should assume hacks will happen

From Perfect Security to Layered Resilience

Bybit CEO Ben Zhou has issued a stark warning to the crypto exchange industry. He argues that operators must stop planning around the assumption that they will remain secure. Instead, exchanges should treat security breaches as an inevitability. This perspective follows Bybit’s own experience of absorbing a massive theft. Zhou emphasizes that survival depends on layered defenses rather than relying on a single point of failure.

Zhou’s comments come after Bybit suffered an approximately $1.5 billion hack. The incident forced the exchange to absorb the loss to protect customer assets. This event reshaped how Zhou views risk management in the sector. He believes the industry has been too optimistic about its own security posture.

Zhou advocates for a shift from seeking perfect security to building layered resilience. He explains that exchanges need multiple independent defense mechanisms. If one layer fails, the next layer must hold. This approach acknowledges that no single security measure is infallible. Bybit’s recovery from the $1.5 billion theft demonstrates that contingency plans are not optional. They are essential for maintaining customer trust and operational continuity.

How Should Exchanges Prepare for Inevitable Breaches?

Zhou outlines a practical framework for exchange operators. First, implement multi-factor authentication across all access points. Second, maintain cold storage for the majority of customer assets. Third, conduct regular penetration testing and red-team exercises. These steps reduce the probability of a successful attack. More importantly, they limit the damage when an attack succeeds. Zhou stresses that the goal is not to prevent every hack. The goal is to ensure the exchange can survive and recover.

The industry is now moving toward this mindset. Several major exchanges have updated their security architectures in response. They are adding hardware security modules and decentralized key management. Analysts note that this shift could reduce the frequency of catastrophic failures. However, Zhou warns that complacency remains a risk. Exchanges that fail to adopt layered defenses will face greater vulnerability. The message is clear: assume the breach, plan for the impact, and build systems that can withstand it.

Frequently Asked Questions

Why does Zhou say exchanges should assume hacks will happen? Zhou argues that no security system is perfect. Treating hacks as inevitable forces exchanges to build multiple layers of defense. This approach ensures that if one layer fails, others can still protect assets.

What happened to Bybit that influenced this view? Bybit absorbed an approximately $1.5 billion theft. The exchange used its own funds to cover the loss. This experience showed Zhou that contingency planning is critical for survival.

What specific measures does Zhou recommend? He recommends multi-factor authentication, cold storage for most assets, and regular penetration testing. These measures create independent layers of protection. They help limit damage and speed up recovery when a breach occurs.