Bybit officially sues North Korea and hacker group Lazarus Group, successfully obtains preliminary injunction to freeze stolen assets

Odaily News, Bybit announced today that it has officially filed a civil lawsuit in the U.S. District Court for the District of Columbia against North Korea (DPRK), its Reconnaissance General Bureau (RGB), and the Lazarus Group, holding the organization legally accountable for the大规模 cyberattack launched against Bybit in February 2025.

It is reported that Bybit has successfully obtained a preliminary injunction from the court, freezing identified stolen digital assets held or transferred by unidentified individuals and entities (i.e., "John Doe" defendants). In approving the preliminary temporary restraining order, the court described the incident as "one of the largest cryptocurrency thefts in history" and determined that Bybit has a "likelihood of success on the merits" of the case. This civil lawsuit is independent of criminal investigations by U.S. law enforcement and aims to provide an additional legal avenue for asset recovery.

In terms of asset recovery and global collaboration, Bybit has achieved notable results in partnership with blockchain analytics firms, multiple exchanges, custodial institutions, and international law enforcement agencies. To date:

Approximately $48.4 million in stolen assets have been successfully recovered;

Approximately $30.5 million in involved assets have been successfully frozen (distributed across more than 28 exchanges and custodial institutions).

These efforts have also supported broader law enforcement actions targeting key infrastructure allegedly used to launder stolen funds: German authorities have dismantled cryptocurrency exchange eXch; German and Swiss authorities subsequently jointly shut down mixing platform Cryptomixer.io, cutting off critical channels for transferring illicit proceeds. These actions collectively demonstrate the effectiveness of collaboration between the private sector and law enforcement agencies in combating transnational cybercrime.

Ben Zhou, co-founder and CEO of Bybit, stated: "Our core goal has never changed: prioritizing user protection, making every effort to recover assets, and ensuring those behind this are held accountable under the law. The Lazarus attack was not only directed at Bybit, but also a challenge to the trust foundation of the entire crypto industry. We will continue to deepen cooperation with law enforcement agencies, regulatory authorities, and courts to make the crypto world a place where criminals find it difficult to hide."

Bybit emphasized that it will continue to invest in advanced blockchain tracking technology, utilize all available legal means to combat state-sponsored hacker groups, and drive the establishment of a more resilient digital asset ecosystem. The civil lawsuit is currently ongoing.