Exchange Reviews
Bybit Review 2026: Security, Fees, Liquidity Recovery and Trust After the $1.5B Hack
October 22, 2026 · 14 min read · By DropHODL Research
Security
★★★★★
Post-hack rebuild
Trading Fees
0.01% / 0.06%
Maker / Taker
Liquidity
Recovered
BTC depth at 8%
Reserves
$19.2B
Total net assets
Key Takeaways
- Bybit suffered a $1.5 billion hack in February 2025 — the largest in crypto history — but fully restored all customer assets within days[1]
- As of mid-2026, BTC market depth has fully recovered to pre-hack levels, per Kaiko data[2]
- Bybit holds $19.2 billion in net assets with a layered reserve structure (spot and derivatives audited separately)[3]
- Licensed in Austria (MiFIA) and UAE (VARA), with active regulatory compliance across multiple jurisdictions[4]
- Competitive derivatives fees with negative maker fees on select pairs — among the best for high-frequency traders
- Compared to Binance, Bybit offers stronger derivatives tools but lower spot liquidity and fewer supported assets
What Is Bybit?
Founded in 2018 and headquartered in Dubai, Bybit is one of the world’s top cryptocurrency exchanges by derivatives trading volume. The platform specializes in perpetual contracts, options, and spot trading, serving over 60 million registered users globally.[5]
Bybit built its reputation on a fast, reliable matching engine capable of handling 100,000 transactions per second (tps) with zero downtime during peak market volatility. This made it a favorite among professional derivatives traders who needed execution speed and deep liquidity — qualities that were severely tested during the February 2025 security incident.
For a broader comparison of how Bybit stacks up against other major platforms, see our Binance Review 2026.
The $1.5B Hack: What Happened and How Bybit Responded
On February 21, 2025, Bybit disclosed that a sophisticated attack had drained approximately $1.5 billion in ETH from a cold wallet during a routine internal transfer between cold and hot wallets.[1] The attack was attributed to North Korea-linked hacking group Lazarus Group by U.S. intelligence sources.[6]
TIMELINE OF EVENTS
- Feb 21, 2025: Hack disclosed; Bybit confirms all customer assets are safe
- Feb 22, 2025: CEO Ben Zhou confirms emergency loans and deposits to cover the loss[1]
- Feb 23, 2025: Bybit announces reserves fully replenished; withdrawals remain open
- Feb 25, 2025: 10% bounty offered for return of stolen funds
- Mar 2025: ~$6 billion in customer withdrawals observed (DefiLlama data)[7]
- Mid-2025: BTC market depth begins recovery from 0.1% low
- May 2026: Kaiko confirms BTC liquidity fully restored to pre-hack levels[2]
What sets Bybit apart from exchange disaster stories like FTX is transparency and speed of response. The exchange never suspended withdrawals, never froze customer accounts, and rebuilt its reserves within 72 hours through emergency loans from Galaxy Digital, Bitget, MEXC, and Antalpha Global.[7]
This stands in stark contrast to the Bitget hack in September 2026, where a $387.5 million loss led to temporary withdrawal suspensions and a multi-day recovery process.[8] While Bitget’s $300M Protection Fund ultimately covered user losses, the incident highlighted the risks of centralized exchange custody — a theme we explore in our Ledger Wallet Review and Cypherock Wallet Review.
Security Architecture (Post-Hack Overhaul)
Following the 2025 incident, Bybit undertook a comprehensive security overhaul. Here’s what’s in place today:
| Security Feature | Details |
|---|---|
| Cold Storage | Multi-signature cold wallets with geographically distributed key shards |
| Proof of Reserves | Layered reserve structure — spot and derivatives audited independently[3] |
| 2FA / Account Security | Google Authenticator, SMS, email verification, anti-phishing code |
| Withdrawal Whitelist | Pre-approved addresses only; 24-hour cooling period for new addresses |
| Real-Time Risk Engine | Automated monitoring for anomalous transfer patterns; sub-second freeze capability |
| Bug Bounty | Active program with rewards up to $100,000 for critical vulnerabilities |
Trading Fees
Bybit’s fee structure is among the most competitive in the industry, particularly for derivatives traders:
| Market | Maker | Taker | Notes |
|---|---|---|---|
| Spot | 0.10% | 0.10% | VIP tiers reduce to 0.08%/0.10% |
| USDT Perpetual | 0.01% | 0.06% | Negative maker on select pairs[9] |
| USDC Perpetual | 0.01% | 0.06% | Same as USDT perps |
| Inverse Perpetual | 0.01% | 0.06% | Settled in crypto |
| Options | 0.01% | 0.03% | Among lowest in industry |
For comparison, Binance offers 0.1%/0.1% spot (0.075% with BNB discount) and 0.02%/0.04% for futures. Bybit’s derivatives maker fee of 0.01% — and negative maker fees on certain pairs — gives it an edge for market makers and high-frequency strategies.[9]
Supported Assets and Markets
Bybit supports 650+ trading pairs across spot, margin, perpetual futures, and options. While this is impressive, it trails Binance’s 630+ spot assets in raw spot count but leads in derivatives variety.
- Spot: 650+ pairs including BTC, ETH, SOL, and emerging tokens
- USDT Perpetuals: 250+ contracts with up to 100x leverage
- USDC Perpetuals: 100+ contracts
- Inverse Perpetuals: BTC, ETH, EOS, XRP, and more
- Options: BTC and ETH European-style options
- Copy Trading: Integrated platform to follow top-performing traders
- Launchpad: Periodic token launch events for early-stage projects
Regulatory Status
Bybit has made significant progress in regulatory compliance since relocating its headquarters to Dubai:
- UAE (VARA): Licensed under the Virtual Assets Regulatory Authority[4]
- Austria (MiFIA): Holds a MiFID-compliant license for European operations[4]
- Dubai: Physical headquarters with full regulatory registration
- Not available in: United States, mainland China, and several other restricted jurisdictions
For users in regulated markets, Coinbase remains the most compliant option in the U.S., while Bybit serves the rest of the global market with a derivatives-focused offering.
Bybit vs. Competitors: Quick Comparison
| Feature | Bybit | Binance | OKX |
|---|---|---|---|
| Trust Score | 9.5/10 | 9.6/10 | 9.3/10 |
| Spot Maker/Taker | 0.10%/0.10% | 0.10%/0.10% | 0.08%/0.10% |
| Perp Maker/Taker | 0.01%/0.06% | 0.02%/0.04% | 0.02%/0.05% |
| Total Reserves | $19.2B | $155.6B | $28.9B |
| Proof of Reserves | Yes (layered) | Yes (SAFU) | Yes (zk-STARK) |
| Max Leverage | 100x | 125x | 100x |
| Major Hack History | $1.5B (2025) | None | None |
Sources: Exchange official data, Tokenomist.ai, Kaiko, CoinMarketCap · Data as of October 2026[2][3][10]
Pros and Cons
Pros
- Industry-leading derivatives maker fees
- 100,000 tps matching engine
- Full reserve recovery post-hack
- Layered PoR with independent audits
- VARA + MiFIA dual licensing
- Copy trading and launchpad features
- No downtime during the 2025 crisis
Cons
- $1.5B hack history (2025)
- Smaller reserve pool vs. Binance
- Not available in the U.S.
- Fewer spot pairs than Binance
- Recovery took months for full liquidity
- Offshore status may concern some users
Who Should Use Bybit?
Best for: Derivatives traders, market makers, and high-frequency traders who need the lowest possible maker fees and deep perpetual contract liquidity. Also suitable for users interested in copy trading and leveraged positions.
Not ideal for: U.S.-based users (not available), beginners who prefer simpler interfaces, or users who prioritize maximum reserve transparency over trading features. For self-custody-focused users, consider exploring our MetaMask Wallet Review or Bitget Wallet Review.
Final Verdict
Bybit’s response to the largest hack in crypto history is a case study in exchange crisis management. By never suspending withdrawals, fully replenishing reserves within 72 hours, and subsequently rebuilding liquidity to pre-hack levels, Bybit demonstrated a level of operational resilience that few exchanges could match.
Today, Bybit remains one of the top derivatives exchanges globally, with competitive fees, strong liquidity, and dual regulatory licensing. The hack is a black mark, but the recovery is the real story.
Trust Score: 9.5 / 10 — Highly Recommended for Derivatives Traders
Sources & References
- Bybit $1.5B Hack & Reserve Recovery (Feb 2025). Source: Sina Finance / Gronhui
- Bybit BTC Liquidity Recovery Confirmed by Kaiko (May 2026). Source: BTC Baike / The Block
- Global Exchange Reserve Comparison — Binance $155.6B, OKX $28.9B, Bybit $19.2B. Source: PHP.cn Exchange Rankings 2026
- Bybit Regulatory Licenses — VARA (UAE) and MiFIA (Austria). Source: 2026 Exchange Safety Rankings
- Bybit 60M+ registered users. Source: 2026 Top 10 Crypto Exchanges
- Bybit Hack Attributed to North Korea’s Lazarus Group. Source: FastBull / Bloomberg
- Bybit $6B Customer Withdrawals Post-Hack (DefiLlama). Source: FastBurr Market Analysis
- Bitget $387.5M Hack & Protection Fund Response (Sep 2026). Source: Baidu / Bloomberg
- Bybit Negative Maker Fees on Select Perpetual Pairs. Source: PHP.cn Exchange Comparison
- Exchange Fee & Market Comparison Data. Source: Kraken Learn 2026
Related Exchange & Wallet Reviews
- Binance Review 2026: Fees, Security, USDC Support and Global Trading Features
- Ledger Wallet Review 2026: Security, Fees, Supported Coins and Hardware Features
- MetaMask Wallet Review 2026: Fees, Security, Supported Chains and DeFi Features
- Coinbase Wallet Review 2026: Security, Fees, Base Support and Self-Custody
- Bitget Wallet Review 2026: Fees, Security, DeFi, Staking and Multi-Chain Support
- Cypherock Wallet Review: Decentralized Cold Storage Security
- Tangem Wallet Review 2026: Security, Fees, Seedless Recovery and Cold Storage
Disclaimer: This review is for informational purposes only and does not constitute financial advice. All data is based on publicly available information as of October 22, 2026. Cryptocurrency trading carries significant risk. Always conduct your own research before choosing a platform. DropHODL may receive referral compensation from platforms reviewed, which does not affect our editorial independence.
