TREE NEWS reports: OneKey founder Yishi Wang said his security team Anzen Labs built a complete USB supply-chain attack chain using AI with one engineer over two weeks, work that previously took two to three senior researchers about two months. In an interview, Wang also detailed the $1.5 billion Bybit hack, tracing it to malware planted in Safe’s official frontend after a Lazarus social-engineering breach of one engineer’s computer, combined with blind signing on a Ledger device.
OneKey Founder Yishi Wang: AI Cut a Full Supply-Chain Attack Chain to Two Weeks
The productivity asymmetry here is the real signal: a single engineer compressing a multi-researcher, multi-month hardware supply-chain attack into two weeks lowers the barrier for well-resourced actors far more than for defenders. Pairing that with the Bybit post-mortem is telling — the described failure points were a compromised official frontend and blind signing on a hardware wallet, not broken cryptography. Whether the security industry's review and signing practices adapt faster than offensive tooling proliferates is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.