
Bybit secured a court order freezing $1.5B in stolen assets after suing North Korea's Lazarus Group over the February hack, testing legal recovery after state-linked crypto thefts.
Bybit has sued North Korea and the Lazarus Group over the February 2025 hack that drained about $1.5 billion from the exchange, and won a preliminary injunction freezing stolen assets, the exchange said in an announcement.
The suit names North Korea and the Lazarus Group as defendants. The court order, granted on August 10, 2026, freezes the assets during litigation, preventing further movement while the recovery case proceeds, Bybit said.
The theft was one of the largest exchange breaches on record. The FBI attributed the hack to North Korean actors in a public service announcement. Blockchain analysis firm Chainalysis has traced the stolen funds and linked addresses used in the Bybit hack to the BingX and Phemex breaches, reinforcing the attribution to a single actor.
The freeze order is interim relief granted while the case develops, aimed at preserving funds before they can be moved further. Bybit described the effort as a landmark crypto asset recovery push in its statement on the injunction.
The case comes as the G7 prepares to address North Korea's crypto theft at an upcoming summit, according to a statement from the group. The lawsuit and asset freeze test whether legal channels can support recovery after a state-linked hack, an area that has seen little precedent in crypto.
Bybit announced the court order on August 10, 2026. No further court dates have been set.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.