Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
FollowingBybit sues North Korea and Lazarus Group over 2025 cryptocurrency theft
Bybit has filed a lawsuit against North Korea and Lazarus Group, accusing them of being involved in a 2025 cryptocurrency theft. The exchange successfully obtained a preliminary injunction to freeze stolen assets and described it as a landmark crypto-asset recovery operation.
Bybit's allegations in the lawsuit
According to an announcement issued by Bybit, the exchange listed the Democratic People's Republic of Korea and Lazarus Group as defendants and linked the case to a hacking incident on its platform in 2025. Bybit said it had obtained a preliminary injunction to freeze stolen assets and emphasized that the lawsuit was an asset recovery operation rather than a purely punitive measure. Relevant court records have appeared in the case file of Bybit Technology Limited v. Democratic People's Republic of Korea.
The lawsuit is newsworthy because it formally introduces a state-related hacking charge into legal proceedings. This move marks a shift from incident disclosure to legal recovery of funds, raising the threshold for exchanges to respond to theft.
Significance of the case to exchanges and users
This recovery lawsuit related to the theft of large exchanges has raised the platform's standards for responding to theft incidents and shifted the narrative from disclosing incidents to pursuing funds in accordance with the law. Chainalysis pointed out in its analysis report that the Bybit hacking attack in February 2025 was closely related to North Korea-related actors.
Including specific countries and organizations as defendants means turning on-chain evidence findings into legal claims, which has an important impact on compliance teams that track pollution funds. The behavior pattern of North Korean hackers against the industry has been reflected in relevant reports.
For users, whether an exchange can recover stolen funds through the court rather than just patching security loopholes will directly affect its reputation and user confidence.
Follow-up Focus
The critical juncture in the near term is procedural progress: whether the preliminary injunction can be upheld and how defendants who may be absent will be dealt with in the case.
Cross-border law enforcement is the biggest uncertainty. It is one thing to freeze assets and trace them online, but it is another to recover funds from sovereign defendants and sanctioned organizations. Success is not inevitable.
Developments that could materially change the situation include any transfer or recovery of stolen assets, substantive court decisions, or the emergence of new tracing evidence. In addition, users assessing exchange risks can also pay attention to changes in its operations, such as Bybit's measures to increase UTA loan mortgage ratios.
Disclaimer: This article is for information only and does not constitute financial or investment advice. There are significant risks in the cryptocurrency and digital asset markets. Please be sure to study for yourself before making a decision.
