Bybit Sues North Korea, Lazarus Group Over 2025 Crypto Heist

The civil case is separate from criminal investigations being conducted by U.S. authorities. Bybit said it continues to cooperate with the Federal Bureau of Investigation, sharing blockchain intelligence and investigative findings.

Since the February 2025 attack, about $48.4 million in stolen assets has been recovered, according to Bybit. More than $30.5 million has also been frozen across over 28 cryptocurrency exchanges and custodians pending further legal and investigative action.

Bybit has worked with blockchain analytics firms, exchanges, custodians, and law enforcement agencies to trace the stolen assets and disrupt networks allegedly used to launder the proceeds. The company cited enforcement actions in Europe as part of the wider effort, including German authorities’ dismantling of cryptocurrency exchange eXch and subsequent action by German and Swiss authorities against Cryptomixer.io.

Bybit said it plans to seek additional judicial relief as the U.S. proceedings advance while continuing to cooperate with law enforcement agencies investigating the attack.

“The real test comes after the crisis,” Zhou said. “Trust isn’t something you claim. You have to earn it through action, every single day.”