April

Safe

Cryptocurrency

United

<h3 id="key-points">Key Points</h3><ul><li>The cryptocurrency exchange initiated legal proceedings in US federal court targeting North Korea, its Reconnaissance General Bureau, and the Lazarus hacking collective following the February 2025 security breach</li><li>Bybit secured expedited discovery rights from a federal judge, enabling the platform to track stolen cryptocurrency across US-registered services</li><li>Hackers successfully obscured 90.2% of stolen digital assets using mixing services and blockchain bridge technologies</li><li>Courts approved preliminary measures to freeze identifiable stolen holdings controlled by unnamed defendants</li><li>Approximately $75.5 million, representing just 5.3% of total stolen funds, has been successfully frozen or retrieved</li></ul><p>The Dubai-headquartered cryptocurrency platform has initiated civil proceedings in the US District Court for the District of Columbia, formally accusing North Korea, its intelligence arm known as the Reconnaissance General Bureau, and the notorious Lazarus hacking organization. The legal action stems from the devastating February 21, 2025 security breach that resulted in the theft of more than 400,000 Ether tokens from the exchange, valued at approximately $1.5 billion during the incident.</p><div class="embed-x"><blockquote class="twitter-tweet"><p>BREAKING: <img src="https://s.w.org/images/core/emoji/17.0.2/72x72/1f1f0-1f1f5.png" alt="🇰🇵" class="wp-smiley" style="height: 1em; max-height: 1em;">Bybit sues North Korea over the $1.5 billion Lazarus Group crypto heist.</p><p>A U.S. federal court granted a preliminary injunction freezing identified assets linked to the hack while the civil case proceeds. <a href="https://t.co/gFsrTaOwST" rel="noopener noreferrer nofollow">pic.twitter.com/gFsrTaOwST</a></p><p>— Coin Bureau (@coinbureau) <a href="https://x.com/coinbureau/status/2085768864101712220?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">August 7, 2026</a></p></blockquote></div><p>Federal investigators confirmed North Korean involvement in the cyberattack on February 26, 2025. American law enforcement agencies monitor this hacking operation under the designation TraderTraitor and have issued guidance to cryptocurrency platforms and blockchain companies to reject transactions associated with wallet addresses tied to the money laundering network.</p><h3 id="federal-judge-authorizes-critical-investigative-powers">Federal Judge Authorizes Critical Investigative Powers</h3><p><a href="https://coincentral.com/bybit-adds-six-xstocks-as-collateral-across-lending-products/" rel="noopener noreferrer nofollow">Bybit</a> submitted the legal complaint under confidential seal on June 18, 2026. Within twenty-four hours, a federal magistrate approved expedited discovery procedures. This judicial authorization empowers Bybit to demand identification records, account balance information, and comprehensive transaction logs from any service providers operating within United States jurisdiction.</p><p>The presiding judge simultaneously issued a temporary restraining directive on June 19, blocking unnamed respondents from moving any identifiable stolen digital assets. This protective order received an extension on July 16, followed by partial approval of a preliminary injunction on July 30.</p><p>The preliminary injunction functions as an interim protective measure rather than a conclusive judgment. Its purpose is to safeguard remaining assets during ongoing litigation.</p><h3 id="majority-of-stolen-cryptocurrency-beyond-recovery">Majority of Stolen Cryptocurrency Beyond Recovery</h3><p>According to documentation submitted on June 18, Bybit confirmed that 90.2% of the compromised digital assets had disappeared from traceable blockchain pathways. The perpetrators employed sophisticated laundering techniques including cryptocurrency tumblers, cross-blockchain transfer protocols, and private over-the-counter exchanges to eliminate tracking capabilities.</p><p>The remaining 9.8% had been successfully traced to specific wallet addresses. Within that portion, approximately 5.3% of the complete theft amount—roughly $75.5 million—had been successfully frozen or reclaimed.</p><p>This represents a dramatic decline from initial recovery prospects. Bybit’s chief executive Ben Zhou reported over twelve months prior that 68.57% of the stolen cryptocurrency remained within tracking range. By April 2025, that percentage had collapsed to just 27.6%.</p><p>The security breach occurred when attackers penetrated Safe Wallet’s cloud computing systems using authentication credentials stolen from a Safe platform developer. The intruders inserted malicious programming code, facilitating the large-scale asset extraction.</p><p>Bybit maintains it ensured uninterrupted customer withdrawal services following the incident by acquiring Ether through market purchases, securing institutional loans, and receiving deposits from partner organizations within the cryptocurrency industry. The platform reported no disruption to standard operations.</p><p>Through this litigation, Bybit demands restitution of all stolen digital assets, compensatory damages totaling approximately $1.5 billion, additional punitive damages, and enhanced treble damages authorized under the United States Racketeer Influenced and Corrupt Organizations Act.</p><p><a href="https://coincentral.com/north-korea-arrests-hackers-who-stole-from-state-banks-and-laundered-funds-through-crypto/" rel="noopener noreferrer nofollow">North Korean groups</a> successfully stole an estimated $2.02 billion worth of cryptocurrency throughout 2025, based on intelligence compiled by Chainalysis. The Bybit incident accounted for the vast majority of that annual figure, elevating North Korea’s cumulative cryptocurrency theft to approximately $6.75 billion. Additional attacks in April 2026 attributed to Lazarus-affiliated operatives allegedly extracted another $577 million from Drift Protocol and KelpDAO platforms.</p><p>Bybit emphasizes that this civil litigation proceeds independently from active United States criminal investigations. The cryptocurrency exchange confirms its intention to pursue additional legal remedies as proceedings advance.</p><p>The post <a href="https://blockonomi.com/bybit-takes-legal-action-against-north-korea-following-1-5b-cryptocurrency-theft/" rel="noopener noreferrer nofollow">Bybit Takes Legal Action Against North Korea Following $1.5B Cryptocurrency Theft</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.</p>

Bybit Takes Legal Action Against North Korea Following $1.5B Cryptocurrency Theft

Table of Contents

Blockonomi

Other articles published on Aug 8, 2026

Shiba Inu Price Forecast: $SHIB Eyes Breakout or Breakdown

Binance Red Packet Code 9 August 2026: Claim Free BNB Now

Brazil Now Treats Big Crypto Transfers Like Bank Wires

Crypto ETF News: Bitcoin and Ethereum See Inflows, XRP Stays Quiet

CLARITY Act gets September vote after Senate filing

Expert to XRP Investors: Now Is the Time to Pay Attention. Here’s why

Join our free newsletter for daily crypto updates!