The hack was done during a transfer from a cold wallet to a hot wallet from Bybit
https://www.coindesk.com/business/2025/02/22/bybit-sees-over-usd4-billion-bank-run-after-crypto-s-biggest-hack