Brivv
Bybit Sues North Korea and Lazarus Group Over $1.5 Billion Hack, Wins Asset Freeze
CryptoNews3 min readAI-assisted

Bybit Sues North Korea and Lazarus Group Over $1.5 Billion Hack, Wins Asset Freeze

Bybit has filed a civil lawsuit against North Korea, its Reconnaissance General Bureau and the Lazarus Group over the $1.5 billion hack, securing a preliminary

August 7, 2026Source: coindesk.com

Bybit, the world's second-largest cryptocurrency exchange, has filed a civil lawsuit against the Democratic People's Republic of Korea (DPRK), its Reconnaissance General Bureau (RGB) intelligence agency, and the Lazarus Group, the DPRK-linked hacking group blamed for stealing $1.5 billion from the exchange last year.

The lawsuit was filed in the U.S. District Court for the District of Columbia. Bybit said it also won a preliminary injunction freezing certain stolen assets held by a group of unidentified individuals and entities, named in the case as John Doe defendants, according to a press release issued by the exchange on Friday.

On February 21, 2025, the North Korean state-sponsored Lazarus Group allegedly executed what is described as the largest cryptocurrency heist in history, stealing approximately $1.5 billion in Ethereum, over 400,000 ETH and stETH, from Dubai-based Bybit. The Bybit hack made up the bulk of the $2.02 billion in crypto stolen by North Korea last year. In total, North Korean hackers have stolen $6.75 billion worth of crypto, according to data from Chainalysis. The country is widely believed to use its ill-gotten crypto to fund its weapons program.

"The order is intended to preserve identified stolen digital assets while the litigation continues, representing an important step in Bybit's ongoing efforts to recover funds, support international law enforcement investigations, and reinforce accountability for large-scale cybercrime," Bybit said in the release.

"Our focus has never changed: protect our users first, recover what we can, and make sure the people behind these attacks are held accountable," said Ben Zhou, co-founder and CEO of Bybit, in a statement. "The Lazarus attack wasn't just an attack on Bybit. It was an attack on trust in our industry. That's why we've worked closely with investigators, exchanges, regulators, law enforcement, and now the courts."

The preliminary injunction means a federal judge ordered the respondents not to transfer or sell the assets they're holding while the case is ongoing, Bybit said, adding that it will seek further relief from the court. The firm noted the civil action is being pursued independently of ongoing criminal investigations conducted by U.S. law enforcement authorities.

Source: CoinDesk

Read Brivv on Telegram

Get the top FinTech & crypto stories first — with a quick take on why they matter.

Subscribe@brivv_com

Related Articles