According to Decrypt, the cryptocurrency exchange Bybit has initiated legal proceedings against the Democratic People’s Republic of Korea (North Korea) following a devastating cyberattack executed by their Lazarus Group in February 2025. The incident involved an attempted theft valued at approximately $1.5 billion from Bybit reserves and customer funds.
In response to this aggression, North Korean authorities have filed suit with the United States District Court for the Southern District of New York seeking a freezing order on specific assets within the exchange. A judge subsequently issued a preliminary ruling granting these relief measures against two designated entities linked to the Lazarus Group: one operating out of Hong Kong and another based in Dubai.
The court decision mandates that funds be frozen under strict conditions until further legal orders are enacted, including prohibitions on withdrawals or transfers from specific cryptocurrency wallets held by the accused. This marks a significant escalation where judicial mechanisms intervene directly against state-sponsored cybercriminals operating internationally.
In parallel efforts to mitigate losses and enforce accountability, Bybit reports that it has successfully recovered roughly $48.4 million in stolen digital assets. Additionally, the exchange managed to freeze an extra $30.5 million of illicit funds pending further legal resolution regarding their return or disposition through official channels.
This case highlights the growing complexity as financial regulators and private sector entities utilize litigation strategies against transnational hacking groups. Bybit’s proactive recovery measures combined with judicial asset freezes demonstrate a multi-layered approach to restoring trust in digital finance following catastrophic breaches attributed to geopolitical actors utilizing sophisticated cyber warfare tactics against global markets.
