The Most Expensive Click in Crypto Was a Multisig Approval

​In February 2025, someone at Bybit clicked "Approve" on what looked like a routine transfer. That click cost $1.5 billion: the largest theft in crypto history. No smart contract was exploited. The signers were.

​And it keeps happening: over $2B has left "secure" multisigs in the last 18 months through hidden delegatecalls, silent config changes, thresholds quietly set to 1, lookalike addresses one character-pattern away from the real thing. Every one of these was visible on-chain before the money moved. Nobody looked.

In this live panel, we dig into crypto's most expensive blind spot:

• ​Why audited, multisig-protected treasuries keep getting drained anyway

• ​What Bybit's signers actually saw on their screens versus what they signed

• ​Blind signing: a tooling failure or a process failure?

• ​Whose job is verification: the signer, the wallet, or an independent layer?

• ​The 60-second pre-signing check that catches this class of attack (live demo)

• ​First look: early findings from our ongoing security scan of the largest DAO treasuries

​Who should attend: multisig signers, DAO treasury operators, protocol founders, CFOs and ops leads in crypto, security researchers, anyone whose signature moves real money.

​The panel

​Abhinav, Smart Contract Auditor at QuillAudits, brings the attacker's-eye view: what these malicious transactions actually look like on-chain, and the pre-signing check that catches them before you approve.

​Preetam, Co-founder and CEO of QuillAudits, hosts the conversation, drawing on years of securing Web3 treasuries and helping teams build verification into how they sign.

​Free to attend.

Recording sent to every registrant. Hosted by QuillAudits, securing Web3 since 2018, builders of Multisig Inspector, the free pre-signing verification layer for Safe multisigs (multisiginspector.quillaudits.com : try it before the session).