A US court has granted cryptocurrency exchange Bybit the ability to pursue expedited discovery in its effort to trace and recover funds stolen during a massive $1.5 billion hack attributed to North Korean state-linked actors.
Court Grants Expedited Discovery
The ruling allows Bybit to request sensitive information from cryptocurrency platforms that maintain operations in the United States. Through the expedited discovery process, the exchange can seek account identities, balances, and detailed transaction histories tied to the movement of stolen assets.
This legal mechanism is designed to accelerate the fact-finding phase of litigation, giving Bybit a faster path to gather evidence that could prove critical in identifying where the pilfered funds have flowed and who may be controlling them.
The court's decision hands Bybit a powerful tool to follow the money across the platforms where the stolen assets may have landed.
Chasing a Record-Breaking Theft
The February breach ranks among the largest thefts in cryptocurrency history, with roughly $1.5 billion drained from the exchange. Investigators have pointed to North Korea-linked hacking operations, which have repeatedly targeted digital asset platforms to fund the regime.
Recovering funds moved through blockchain networks and mixing services is notoriously difficult, but tracing efforts hinge on cooperation from exchanges and platforms that can link on-chain activity to real-world account holders.
The court order strengthens Bybit's hand in that pursuit by compelling US-connected platforms to disclose data that might otherwise remain out of reach. Key information the exchange can now seek includes:
- Identities behind implicated accounts
- Current and historical balances
- Transaction records showing the flow of funds
The outcome of the recovery effort remains uncertain, but the ruling underscores how exchanges are increasingly turning to the courts to complement blockchain forensics in the wake of large-scale attacks.