Bybit Sues North Korea and Lazarus Group Over $1.5B Crypto Hack
Crypto exchange Bybit has filed suit against North Korea and the Lazarus Group after a $1.5 billion hack, and secured an asset freeze.
Crypto exchange Bybit has taken legal action against the Democratic People's Republic of North Korea and its notorious state-sponsored hacking unit, the Lazarus Group, following what is believed to be one of the largest cryptocurrency thefts in history. The lawsuit, filed after a $1.5 billion hack drained the exchange's assets, also comes with a secured asset freeze — a rare and aggressive legal maneuver targeting a sovereign nation and its cyber operatives.
The Lazarus Group has long been linked by U.S. and international investigators to sophisticated cyberattacks targeting financial institutions and blockchain platforms as a means of generating illicit revenue for Pyongyang's sanctioned regime. The scale of the Bybit breach underscores how crypto exchanges remain high-value targets for state-sponsored threat actors operating outside traditional legal jurisdictions.
Read more Big Pharma M&A Outlook: What Analysts Are Watching →
By pursuing an asset freeze alongside the civil suit, Bybit is signaling that it intends to pursue every available legal avenue to recover stolen funds, even against defendants who are effectively beyond the practical reach of most Western court systems. Legal experts note that while obtaining a judgment against North Korea is feasible in certain jurisdictions, actual enforcement and asset recovery remain extraordinarily difficult given the geopolitical realities involved.
The lawsuit reflects a broader shift in how crypto firms are responding to large-scale theft — moving from passive incident reporting toward proactive litigation designed to trace, freeze, and potentially recover digital assets scattered across global blockchain networks. The outcome of this case could set important precedents for how courts and the crypto industry treat state-sponsored cybercrime going forward.
Continue reading at CoinDesk.