Overview
Bybit has filed a lawsuit against North Korea, its General Reconnaissance Bureau, and the Lazarus Group, accusing it of stealing cryptocurrencies stolen during an exchange security breach in February 2025. Bybit has recovered approximately $48.4 million, and more than $30.5 million is still frozen at more than 28 cryptocurrency exchanges and custodians. Blockchain tracking, international law enforcement cooperation and court protection measures are supporting Bybit's efforts to preserve assets linked to the massive hacking attack.
Bybit sues North Korea and Lazarus Group in U.S. Federal Court
Bybit has filed a lawsuit in U.S. federal court against North Korea and Lazarus Group over stolen cryptocurrency from the exchange. The lawsuit also targets North Korea's General Reconnaissance Bureau and unknown parties who allegedly held or transferred assets related to the attack. In addition, Bybit also obtained a preliminary injunction restricting the identified defendant from transferring or disposing of cryptocurrencies related to the case. The exchange filed a lawsuit in the U.S. District Court for the District of Colombia as part of its recovery operation. U.S. authorities have previously linked the February 2025 attack to North Korean actors linked to the Lazarus Group. It is worth noting that the court found that Bybit was likely to win the lawsuit. The ruling provides Bybit with another legal means to preserve identified cryptocurrencies while the court hears its broader recovery request. At the same time, the civil suit remains independent of U.S. authorities 'criminal investigation into the attack and related money laundering activities. Bybit also shared blockchain intelligence and investigation results with law enforcement agencies, including the FBI.
Bybit recovers millions of dollars, legal action targets remaining stolen cryptocurrency
Bybit has recovered approximately $48.4 million in cryptocurrency that was stolen in a security breach in February 2025. Another $30.5 million was frozen at more than 28 cryptocurrency exchanges and custodians involved in broader recovery operations. As a result, approximately $78.9 million in assets have either been returned to Bybit or remain inaccessible to the parties allegedly controlling the stolen assets. However, investigators still face significant challenges because most of the cryptocurrencies linked to the attack have not yet been recovered or frozen. Investigators track stolen assets through numerous blockchain addresses, exchanges, custodians, and services involving cryptocurrency transfers. In addition, Bybit collaborated with blockchain analytics companies, international law enforcement agencies, cryptocurrency exchanges and custodians during the investigation. These partnerships help investigators identify transaction paths when stolen cryptocurrencies reach platforms that can restrict withdrawals or freeze assets. Authorities have also targeted infrastructure allegedly associated with cryptocurrency money laundering networks that process proceeds of illegal activities. German authorities banned the cryptocurrency exchange eXch, and then German and Swiss authorities smashed the cryptocurrency mixing service Cryptomixer.io.
Conclusion
Bybit's lawsuit adds civil litigation to blockchain tracking, exchange cooperation and law enforcement measures to support its cryptocurrency recovery operations. The ban provides another mechanism for protecting identified assets, while Bybit pursues remaining cryptocurrency through legal and investigative channels.

Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following