Ethereum Core Developer Insights: Why Ethereum Rollback is No Longer Feasible Today?
Original Article Title: "Tim Beiko Explains: Why Ethereum Cannot Roll Back After Bybit Incident?"
Original Article Author: Tim Beiko
Original Article Translation: GaryMa, Blockchain Wu Shuo
Ethereum core developer Tim Beiko published a lengthy article on February 22, 2025, explaining why Ethereum is unable to "roll back" to reverse a hacker attack, such as the recent Bybit hack. He provided background on Bitcoin and TheDAO historical events and discussed why a rollback is not feasible in today's Ethereum ecosystem. The following is a compilation and translation of the original article and corresponding comment replies by Wu Shuo:
Following the recent hack of Bybit yesterday, some individuals once again questioned why Ethereum cannot "roll back" the blockchain to reverse a hacker attack.
While experienced individuals in the ecosystem almost unanimously believe this is unfeasible, it is worth explaining why this seemingly reasonable proposal is technically infeasible, especially to those less knowledgeable. If you are one of them, here is a simple explanation of why this is impossible.
First, Let's Understand the Background of Rollbacks:
The concept of blockchain "rollback" originated from an early event in the Bitcoin blockchain. In 2010, just under two years after the launch of Bitcoin, a vulnerability in the client software led to the generation of 184 billion (yes, billion) bitcoins in block 74638.
To fix this issue, Satoshi released a software patch for the Bitcoin client that invalidated these transactions. This effectively "rolled back" the chain that continued to mine during this time to block 74637. In less than a day, the new chain accumulated enough proof of work to become the main chain, and all rolled-back user transactions were included in the new chain. It is important to note that at that time, Bitcoin's mining difficulty was 100 billion times lower than it is now, and the BTC/USD price was approximately $0.07.
In short, this scenario was unique because there was a clear protocol bug that led to the problematic transactions, which were easily identifiable due to their immense quantity. Additionally, Bitcoin's adoption at the time was limited, making it easy to distribute a new client version and swiftly mine the new chain segment.
Ethereum and TheDAO:
Early in Ethereum's history, there was a seemingly similar crisis that often confuses people about the practicality of a rollback. In 2016, a popular Ethereum application called TheDAO controlled around 15% of all ETH at the time. Unfortunately, a hacker discovered a vulnerability in the app's code that allowed them to steal all of these funds. This was fundamentally different from Bitcoin's case, as the Ethereum protocol itself was functioning normally, and it was the application built on top of Ethereum that had the issue.
Fortunately, TheDAO's developers implemented a security measure, which required a one-month freeze period before any withdrawals from the application could be completed. This provided a unique opportunity to address the vulnerability: the application's code could be changed to prevent the funds from ending up with the hacker.
Since the application itself could not do this, Ethereum protocol developers had to make changes directly in the blockchain's history. This was referred to as an "extraordinary state change" because the application's "state" was altered through manual updates to the database, rather than through valid Ethereum transactions.
Comparatively rough to the Bitcoin vulnerability mentioned above, it was akin to setting the balance of an address receiving 184 billion BTC to 0, instead of re-mining to exclude those transactions.
This upgrade sparked controversy, leading to an actual split in the Ethereum community. Some miners refused to run the software patch and continued mining on the chain where the hack occurred, which is now known as Ethereum Classic. The chain we now refer to as Ethereum is the one that implemented this software upgrade.
Similarly, this situation was unique. The hacked funds in TheDAO were actually frozen for a month, giving the community time to coordinate the software upgrade. The frozen funds had another major advantage: the hack did not "spread." If the hacker could move funds freely, "freezing" the funds would have been an endless cat-and-mouse game because the protocol is open-source, and any potential changes that could freeze the funds would have to be disclosed to the hacker, giving them enough time to move the funds elsewhere.
This leads us to the Bybit incident.
Why We Can't Roll Back Ethereum
Earlier this week, Bybit exchange was hacked for 401,346 ETH (approximately $1.4 billion). The theft was perpetrated by the custodian of the funds signing deceptive transactions through a compromised multi-signature interface.
The root cause of this hack goes a level higher than TheDAO and the Bitcoin overflow bug. Neither the Ethereum protocol nor the underlying multi-signature application used by Bybit had issues. Instead, a compromised interface made transactions appear to do one thing while actually doing another.
From the Ethereum protocol's perspective, there was nothing to distinguish this transaction from other legitimate transactions on the network. There was no breach of protocol rules to isolate the hacked funds, as could be done to patch the issue in the Bitcoin vulnerability.
Furthermore, the funds were immediately available for the hacker to use. In contrast to TheDAO situation, where the community had a month to deploy interventions, here the hacker immediately began moving funds on-chain.
Even if we could solve the aforementioned cat-and-mouse game, the Ethereum ecosystem today is vastly different from 2016. DeFi and cross-chain bridges to other networks mean any stolen funds can easily be laundered within the application network. For example, stolen funds could be exchanged on a decentralized exchange, the resulting tokens used as collateral in DeFi protocols, borrowed assets then bridged to a completely different chain.
This high level of interconnectivity means any non-standard state change, even if socially acceptable, would lead to almost impossible-to-manage cascading effects. A full "rollback," even with only recent portions of the chain's history invalidated, would be worse. Any settled transactions, many of which have off-chain impacts (such as exchange sales, RWA redemptions, etc.), would be reverted but their off-chain portions cannot.
Therefore, the conclusion is, while Bitcoin was able to "rollback" its blockchain fifteen years ago, today, Ethereum's highly interconnected nature and settlement of both on-chain and off-chain economic transactions make this unfeasible in the present day.
Technically, a non-standard state change could still occur on Ethereum in cases where funds are frozen and sequestered. The last time such a change was proposed was in 2018, addressing a vulnerability in the Parity multi-signature wallet where around 500,000 ETH were frozen (see EIP-999), but due to the controversy sparked by TheDAO incident, the community strongly opposed it.
Comment: At this stage, is it still potentially possible to carry out a social hard fork? Zero out the Lazarus funds (as they are easily traceable) and carry out a non-standard state change to send the funds back to the Bybit address?
Reply: Technically not possible. If we were to announce a hard fork, what if they move the funds to another address one block before it goes into effect? If the hacker moves the funds before the fork, the fork would be useless. Additionally, the attacker could cause a network-wide freeze through malicious interactions (such as sending small amounts of funds to all addresses), akin to a denial-of-service (DoS) attack.
Comment: If TheDAO hack were to happen now (funds frozen for a month, potential community coordination), do you think Ethereum governance would once again accept a non-standard state change? Or has the protocol culture completely shifted towards strict immutability, even in extreme scenarios?
Reply: It's hard to say! TheDAO had control of around 15% of all ETH (30 times the current Bybit hack amount), but the outcome was more controversial than anticipated. I believe this is one of the primary reasons the Parity hack (around 500,000 ETH, funds frozen and hence recoverable) was never fixed via a hard fork. To provide some perspective, TheDAO held approximately the equivalent of all WETH today plus all L2 collateralized value (not just ETH on L2, but all L2 tokens) in staked ETH. That is a scale of intervention the ecosystem was far from mature enough for at the time.
Comment: The same logic can also be applied to more centralized chains, such as Solana, right? So, for hackers, both Solana and Ethereum are decentralized enough?
Reply: Exactly. Solana may be faster in implementing a hard fork than Ethereum, but you would still have many secondary effects and the risk of attackers moving funds before the hard fork takes effect.
Comment: If wETH were to be attacked, would you rollback?
Reply: I do not have the choice, but I think this is possibly the smallest scale at which this topic could be raised? My point is more that comments about DAOs often make it seem like "just an application" rather than a situation where WETH and all funds on Layer 2 are frozen in a way that is easy to recover from. (i.e., the key point is the scale of funds and ease of recovery)
You may also like
Meet the new WEEX trial fund—your gateway to greater profits
WEEX Labs Lands at Dutch Blockchain Week: A Disruptive Crypto × AI Conversation Sets Sail in Amsterdam
SK Hynix Reportedly Plans U.S. ADR Listing as Early as August, With SEC Approval Possible in Late June
SK Hynix may pursue a U.S. ADR listing as early as August, with SEC approval reportedly possible in late June amid strong AI chip supply chain demand.
SpaceX vs Tesla vs xAI: Which Elon Musk Trade Has the Biggest Upside in 2026?
OpenAI Reveals It Has Confidentially Submitted an S-1 to the SEC, Keeping the Door Open for a Future IPO
On June 9, according to an OpenAI announcement, the company recently confidentially submitted a draft S-1 registration statement to the U.S. Securities and Exchange Commission (SEC), beginning the preliminary compliance process for a potential initial public offering. OpenAI said it chose to disclose this proactively because it expected the news might leak; however, the company has not yet set a specific listing timeline, and related arrangements may still take some time.
Latest research from 13 top universities including Cornell University: The current state, challenges, and misconceptions of the fusion of Crypto and AI
Deconstructing Anthropic: The Best AI Company, Possibly Also a Type of Organizational Invention
Apollo and Blackstone Reportedly Back $35 Billion Anthropic Chip Financing as Deal Details Remain Unclear
On June 9, according to currently available news alerts, Apollo and Blackstone Group participated in a $35 billion financing for an Anthropic “chip project.” Based on the original wording of the report, the funding has already been raised, but public information remains limited. The financing structure, use of proceeds, project entity, and whether Apollo and Blackstone participated through equity, debt, or project financing have not yet been disclosed.
Humanity Protocol Security Incident Escalates: More Than $31 Million Stolen From Related Addresses as Attacker Continues Selling H for ETH
On June 9, according to monitoring by Onchain Lens, more than $31 million has been stolen from addresses linked to Humanity Protocol, and the attack is still ongoing, with the hacker continuously swapping H tokens for ETH. Project founder Terence Kwok later confirmed the security incident on X, saying the issue involved a private key leak.
Bloomberg: As Bitcoin Weakens, Stablecoins and RWA Continue to Drive Expansion in Crypto Businesses
In June, Bloomberg reported that despite Bitcoin falling below $60,000 last week, wiping out about $235 billion in market value within seven days, and dropping close to 50% from last year’s peak, some core businesses in the crypto industry are still expanding, mainly in stablecoins, real-world asset tokenization (RWA), payments, and infrastructure. The report also noted that overall altcoin activity has contracted significantly: altcoin market capitalization has fallen from a peak of about $431 billion in November 2021 to around $170 billion, and among the tens of millions of tokens issued in recent years, fewer than 1,700 still maintain meaningful trading activity.
Galaxy Deep Research Report: How Hyperliquid's HIP-4 Upgrade Changes the Landscape of Prediction Markets?
Binance Research: RWA Market Expected to Expand Nearly 6x from Early 2025, with Public Equities and Onchain Payments Heating Up Together
In June, Binance Research said in its monthly market report that the real-world asset (RWA) market is expected to grow by about 589% from the beginning of 2025. Bond- and money market fund-related RWA expanded by about $6.5 billion, up 83% year over year, while publicly traded equity RWAs grew by about 422%. The report also noted that monthly crypto debit card transaction volume exceeded $747 million in May, up 48.6% year to date.
Japan to Assess a Framework for Yen Stablecoins and Crypto ETFs as Asia’s Compliant Payments Narrative Heats Up
Recently, according to the original report, Japan is considering the launch of yen stablecoins and cryptocurrency ETFs. Public information remains limited at this stage, and there is still no complete policy text, regulatory draft, or clear implementation timeline, so this is better characterized as a “policy discussion” rather than formal implementation. The original wording also noted that advancing stablecoin regulation in Asia is driving XRP usage and supporting growth in the XRPL ecosystem. However, based on currently available public information, there is not enough evidence to directly establish a clear causal relationship between this round of discussion in Japan and XRP or XRPL.
ZachXBT: Humanity private key leak and abnormal surge in H token should be viewed separately
On June 9, according to related disclosures, on-chain investigator ZachXBT posted an update on Humanity’s roughly $31 million security incident, saying that after further analyzing fund flows, he currently tends to believe the project team was not involved in an “inside job” or a self-staged attack. According to him, the official explanation about the private key leak was broadly accurate, but before the token unlock, the price of H had been artificially pushed higher, and the hacker later took advantage of that market environment; therefore, the private key leak and the earlier abnormal price pumping should be regarded as two separate and independent events. This reframing has shifted the market’s understanding of the nature of the incident. Earlier discussion around Humanity had focused on whether the team directly participated in the attack or used the security incident to cover up internal operations. ZachXBT’s latest remarks shift the focus from “whether it was self-theft” to “whether there were pre-unlock market structure issues.” He also questioned whether the team may have.
Morning Report | OpenAI has submitted an S-1 registration statement draft to the U.S. SEC; Morpho completes $175 million financing
Morning Report | BitMine increased its holdings by 126,971 ETH last week; trader Eugene announced his exit from the crypto market
Wang Chuan: How can one not feel anxious after the neighbor Old Wang made thirty times profit by investing in storage stocks? (Seven) - A quarter-century cycle
Cryptocurrency CEXs are flocking to sell US stocks, and traditional brokerages are facing an "uninvited guest."
Meet the new WEEX trial fund—your gateway to greater profits
WEEX Labs Lands at Dutch Blockchain Week: A Disruptive Crypto × AI Conversation Sets Sail in Amsterdam
SK Hynix Reportedly Plans U.S. ADR Listing as Early as August, With SEC Approval Possible in Late June
SK Hynix may pursue a U.S. ADR listing as early as August, with SEC approval reportedly possible in late June amid strong AI chip supply chain demand.
SpaceX vs Tesla vs xAI: Which Elon Musk Trade Has the Biggest Upside in 2026?
OpenAI Reveals It Has Confidentially Submitted an S-1 to the SEC, Keeping the Door Open for a Future IPO
On June 9, according to an OpenAI announcement, the company recently confidentially submitted a draft S-1 registration statement to the U.S. Securities and Exchange Commission (SEC), beginning the preliminary compliance process for a potential initial public offering. OpenAI said it chose to disclose this proactively because it expected the news might leak; however, the company has not yet set a specific listing timeline, and related arrangements may still take some time.
Latest research from 13 top universities including Cornell University: The current state, challenges, and misconceptions of the fusion of Crypto and AI
