Cryptocurrency exchange Bybit has taken legal action against North Korea over a devastating $1.5 billion hack, securing a court order to freeze assets tied to the state-sponsored theft that occurred earlier this year.
## The Lawsuit and Legal Victory Bybit has filed suit in connection with the February 2025 breach, widely attributed to North Korea's notorious Lazarus Group. The exchange succeeded in obtaining a court order that freezes assets linked to the stolen funds, marking a significant step in its ongoing recovery efforts.
The legal maneuver represents one of the more aggressive responses by a crypto exchange against a state-backed hacking operation. By pursuing formal legal channels and freezing orders, Bybit aims to reclaim as much of the stolen cryptocurrency as possible before it can be laundered or dispersed.
A $1.5 billion theft ranks among the largest crypto heists in history, and Bybit is fighting to claw back every dollar it can.
## Recovery Efforts So Far Despite the freezing order, the amounts recovered remain a small slice of the total loss. Bybit says it has recovered $48.4 million and frozen an additional $30.5 million, according to the exchange's figures.
Combined, those totals amount to roughly $79 million — a fraction of the $1.5 billion that was drained during the February attack. The gap underscores how difficult it is to trace and retrieve funds once they enter the hands of sophisticated laundering operations.
The Lazarus Group has been linked to numerous high-profile crypto thefts over the years, often moving stolen assets through mixers, cross-chain bridges, and other obfuscation techniques designed to break the trail for investigators.
- Total stolen: approximately $1.5 billion
- Amount recovered: $48.4 million
- Additional assets frozen: $30.5 million
Bybit's pursuit of legal remedies signals a broader industry trend of exchanges turning to courts and asset freezes as tools to combat state-sponsored cybercrime, even when full recovery remains a distant prospect.