
The exchange won a preliminary injunction to freeze stolen assets held by unidentified parties. The lawsuit aims to recover funds and hold North Korea accountable. The case could set a precedent for crypto exchange recovery efforts.
Bybit, the world's second-largest cryptocurrency exchange, has filed a civil lawsuit against North Korea's Reconnaissance General Bureau and the Lazarus Group, the state-sponsored hacking group that stole $1.5 billion from the exchange last year. The exchange also won a preliminary injunction freezing certain stolen assets, Bybit said in a press release Friday.
The lawsuit was filed in the U.S. District Court for the District of Columbia. It names the Democratic People's Republic of Korea as a defendant alongside its intelligence agency and the hacking group. The preliminary injunction prevents unidentified individuals and entities, named as John Doe defendants, from transferring or selling the assets while the case is ongoing, Bybit said.
On Feb. 21, 2025, the Lazarus Group executed the largest cryptocurrency heist in history, stealing about 400,000 ETH and stETH from the Dubai-based exchange. The hack accounted for a large share of the $2.02 billion in crypto stolen by North Korea last year, according to data from Chainalysis. North Korean hackers have stolen $6.75 billion worth of crypto in total, the firm said. The country is widely believed to use the proceeds to fund its weapons program.
“The order is intended to preserve identified stolen digital assets while the litigation continues,” Bybit said in the release. “Our focus has never changed: protect our users first, recover what we can, and make sure the people behind these attacks are held accountable,” CEO Ben Zhou said in a statement. “The Lazarus attack wasn't just an attack on Bybit. It was an attack on trust in our industry.”
The civil action is being pursued independently of ongoing criminal investigations by U.S. law enforcement, Bybit said. The exchange said it will seek further relief from the court, including additional orders to recover the stolen assets.
Crypto firms are increasingly turning to civil litigation to freeze and recover funds from state-sponsored hackers. Bybit's lawsuit is one of the largest such actions, targeting a regime that has stolen billions of dollars in digital assets. The Ethereum (ETH) profile shows the token at the center of the heist, with the stolen ETH representing a significant portion of the exchange's holdings.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.