Bybit Freezes $1.5B Stolen Assets in Landmark Suit Against North Korea

Woofun AI reports that a civil lawsuit was filed in the U.S. District Court for the District of Columbia, targeting the Democratic People's Republic of Korea (DPRK), its Reconnaissance General Bureau (RGB), and the Lazarus Group. This legal action stems from the attribution of a massive cryptocurrency theft to these state-linked entities, with Bybit securing a preliminary injunction to freeze assets held by unidentified John Doe defendants.

The incident occurred on February 21, 2025, when the Lazarus Group allegedly executed the largest crypto heist in history against the Dubai-based exchange. Approximately $1.5 billion in Ethereum, comprising over 400,000 ETH and stETH, was stolen. This single event constituted the majority of the $2.02 billion in crypto stolen by North Korea last year. Per Woofun AI, Chainalysis data indicates that North Korean hackers have accumulated $6.75 billion in total crypto thefts to date.

Structurally, the motive behind these operations is widely believed to be the funding of the country's weapons program. The illicit proceeds from the Bybit hack and other breaches are viewed as critical financial resources for the DPRK's military ambitions, linking cybercrime directly to geopolitical security threats.

Ben Zhou, co-founder and CEO of Bybit, emphasized that the attack targeted industry trust rather than just the exchange. He stated that the company has worked closely with investigators, exchanges, regulators, law enforcement, and now the courts to ensure accountability. The focus remains on protecting users and recovering funds while reinforcing the legal framework against large-scale cybercrime.

The preliminary injunction ordered by a federal judge prohibits respondents from transferring or selling the frozen assets during litigation. Bybit intends to seek further relief from the court, pursuing this civil action independently of ongoing criminal investigations conducted by U.S. law enforcement authorities.