Bybit sues North Korea and Lazarus Group over $1.5 billion crypto hack

Bybit has filed a civil lawsuit against North Korea, its Reconnaissance General Bureau intelligence agency and the Lazarus Group over the $1.5 billion crypto theft that hit the exchange in February 2025.

The lawsuit was filed in the US District Court for the District of Columbia. Bybit also secured a preliminary injunction freezing certain stolen assets held by unidentified individuals and entities named as John Doe defendants.

The Lazarus Group allegedly stole more than 400,000 ETH and stETH from Bybit on February 21, 2025, in what became the largest crypto theft on record.

Bybit said the injunction prevents the defendants from transferring or selling the identified assets while the case proceeds.

The exchange said the legal action is part of its broader effort to recover stolen funds and hold those responsible for the attack accountable.

Bybit added that the civil case is being pursued separately from ongoing criminal investigations by US law enforcement and that it plans to seek additional relief from the court.