Not a bank vault. Not a gold reserve. A single transfer that moved one and a half billion dollars into the hands of North Korea — in about one minute.

No password was stolen. No private key was cracked. No credential was phished. The people who authorized that transfer did exactly what their security manual demanded. They kept the money in offline cold storage. They required multiple signatures. They held hardware security keys. They checked the destination address with their own eyes — and it matched.

February 21, 2025. Inside the operations center of Bybit — a cryptocurrency exchange headquartered in Dubai, moving tens of billions of dollars in daily trading volume — a routine transfer begins. Four hundred one thousand three hundred forty-seven Ethereum tokens. Roughly one and a half billion dollars. Moving from Bybit's multisignature cold wallet, held offline for security, to a warm wallet used for day-to-day liquidity.

RECOMMENDATION: Maintain active monitoring of the named entities and systems. Refer requests for declassified detail to the Office of Operations. In this case, the number of people who could have prevented the largest theft in history was one.