In brief
- Bybit has sued North Korea, its Reconnaissance General Bureau and the Lazarus Group in U.S. federal court over the $1.5 billion theft from the exchange in February 2025.
- A judge granted a preliminary injunction freezing identified stolen assets and found Bybit likely to succeed on the merits, according to the exchange.
- Some $48 million has been recovered and $31 million frozen across more than 28 exchanges and custodians.
Crypto exchange Bybit has filed a civil lawsuit against North Korea over the theft of $1.5 billion from the exchange in February 2025, and secured a court order freezing stolen assets that investigators have identified.
The suit, filed in the U.S. District Court for the District of Columbia, names the Democratic People's Republic of Korea, its Reconnaissance General Bureau and the Lazarus Group, the state-linked hacking outfit U.S. authorities blame for the attack. Unidentified individuals and entities holding or moving the funds are named as John Doe defendants.
A judge granted a preliminary injunction barring the transfer or dissipation of identified assets while the case proceeds, and found Bybit likely to succeed on the merits, the exchange said on Friday. In granting an earlier temporary restraining order, the court characterized the theft as among the biggest the industry has seen.
"It was an attack on trust in our industry," the firm's co-founder and CEO Ben Zhou said in a statement Thursday, adding that Bybit had worked with investigators, exchanges, regulators and law enforcement before turning to the courts.
Bybit said that around $48.4 million has been recovered and about $30.5 million frozen across more than 28 exchanges and custodians, together amounting to approximately 5% of what was taken.
