Bybit Sues North Korea Over $1.5B Hack, Wins Order Freezing Assets

In brief

• Bybit has sued North Korea, its Reconnaissance General Bureau and the Lazarus Group in U.S. federal court over the $1.5 billion theft from the exchange in February 2025.
• A judge granted a preliminary injunction freezing identified stolen assets and found Bybit likely to succeed on the merits, according to the exchange.
• Some $48 million has been recovered and $31 million frozen across more than 28 exchanges and custodians.

Crypto exchange Bybit has filed a civil lawsuit against North Korea over the theft of $1.5 billion from the exchange in February 2025, and secured a court order freezing stolen assets that investigators have identified.

The suit, filed in the U.S. District Court for the District of Columbia, names the Democratic People's Republic of Korea, its Reconnaissance General Bureau and the Lazarus Group, the state-linked hacking outfit U.S. authorities blame for the attack. Unidentified individuals and entities holding or moving the funds are named as John Doe defendants.

A judge granted a preliminary injunction barring the transfer or dissipation of identified assets while the case proceeds, and found Bybit likely to succeed on the merits, the exchange said on Friday. In granting an earlier temporary restraining order, the court characterized the theft as among the biggest the industry has seen.