Bybit Fast-Tracks $1.5B North Korea Hack Evidence in U.S. Court

Woofun AI reports that a U.S. court granted Bybit approval to expedite discovery in its legal action against North Korea, the Reconnaissance General Bureau, and the Lazarus Group. This ruling permits the exchange to bypass standard procedural delays, allowing for the immediate acquisition of critical evidence linked to the massive cyber incident.

The underlying incident involved a $1.5 billion theft from Bybit's Ethereum wallet in February 2025, marking one of the largest cryptocurrency thefts on record. The breach was executed by state-sponsored actors, resulting in the rapid exfiltration of digital assets to external addresses. The scale of the loss underscores the severity of the attack on centralized infrastructure.

In June 2025, Bybit filed a sealed lawsuit naming North Korea, the Reconnaissance General Bureau, the Lazarus Group, and 20 unidentified individuals as defendants. The litigation seeks account holder identities and transaction records from entities holding funds derived from the hack. This legal filing formalizes the exchange's effort to identify the specific recipients of the illicit proceeds.

Woofun AI data shows that traceable assets from the breach have flowed into exchanges operating within the United States. Bybit argues that obtaining this data is essential to collaborate with international law enforcement and blockchain analytics firms. The goal is to freeze illicitly obtained funds before they can be further obscured or laundered through complex financial networks.

The expedited discovery order serves to shorten the timeline for evidence gathering, a critical factor when stolen assets move rapidly across borders. This case highlights the intersection of cryptocurrency and national security, as North Korean groups target digital platforms to fund state programs. It also establishes a precedent for cross-border cybercrime cases, emphasizing the need for robust compliance measures.

For everyday crypto users, this outcome may influence how centralized exchanges handle security breaches and pursue legal recourse. The decision reinforces the vulnerability of major platforms to sophisticated attacks while signaling a deterrent effect through judicial cooperation. As the case progresses, it will test the resilience of blockchain tracing technologies and the effectiveness of recovering stolen funds.