Bybit Sues North Korea Over $1.5B Hack, Wins Freeze Order
Bybit has filed a civil lawsuit against North Korea and the Lazarus Group for the $1.5 billion Ethereum hack, and won a court order to freeze assets. Around $48 million has been recovered and $31 million frozen, with most of the stolen ETH converted to Bitcoin and pushed through mixers.
Quick Take
Bybit files civil lawsuit against North Korea over $1.5 billion hack.
Court grants preliminary injunction to freeze identified stolen assets.
Around $48M recovered and $31M frozen across 28+ exchanges.
69% of stolen funds remain traceable, while 28% went dark.
Market Impact Analysis
BullishPositive news about recovery and legal action against the Lazarus Group boosts industry trust and could encourage further cooperation, but the amount recovered is small relative to the total loss.
Speculation Analysis
Key Takeaways
- Bybit filed a civil lawsuit against North Korea and the Lazarus Group in a U.S. federal court over the $1.5B Ethereum hack.
- A preliminary injunction freezes identified stolen assets, aiding recovery efforts alongside ongoing criminal investigations.
- Roughly $48.4M has been recovered and $30.5M frozen across 28 exchanges and custodians, but 95% remains at large.
- 69% of stolen funds remain traceable, with most converted to Bitcoin and pushed through mixers, complicating recovery.
What Happened
Bybit took legal action against North Korea and its notorious Lazarus Group, filing a civil complaint in the U.S. District Court for the District of Columbia. The exchange seeks to reclaim $1.5 billion in Ethereum stolen in a sophisticated February 2025 hack. Attackers manipulated a signing interface to drain 500,000 ETH from a cold wallet. The court granted a preliminary injunction to freeze identified assets, finding Bybit likely to win the case. CEO Ben Zhou called the theft "an attack on trust in our industry." The civil suit complements criminal probes and cooperation with agencies like the FBI.
The Numbers
The hack saw 500,000 ETH stolen. To date, $48.4 million has been recovered and $30.5 million frozen across 28+ exchanges and custodians—roughly 5% of the total. Bybit's founder reported 69% of funds remain traceable, 28% have gone dark, and 4% were frozen earlier. Most stolen ETH was swapped to Bitcoin via Thorchain and laundered through mixers like Wasabi and Tornado Cash. Greek authorities traced a portion to a domestic exchange in June 2025.
Why It Happened
The hack exploited a user interface vulnerability—the signing interface displayed the correct destination but altered the wallet's logic underneath. This allowed attackers to reroute 500,000 ETH. North Korea's Lazarus Group, known for state-sponsored crypto thefts, is blamed. The lawsuit aims to establish legal ownership over the stolen assets and force compliance from intermediaries. It signals that exchanges will pursue cross-border legal remedies, not just rely on on-chain tracking and voluntary cooperation.
Broader Impact
This case could set a precedent for using U.S. courts to recover crypto stolen by state actors. It may encourage tighter industry collaboration and push for clearer legal frameworks. Despite the small recovery percentage, the legal victory boosts confidence that stolen funds are not beyond reach, potentially deterring future hacks.
What to Watch Next
- Follow court rulings on asset freezes and any cooperation from named exchanges or custodians.
- Monitor blockchain forensics for further traceability breakthroughs as mixers adapt.
- Watch for regulatory or legislative actions in response to state-sponsored crypto crime.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
