UAE-Based Bybit Sues North Korea and Lazarus Group in U.S. Court Over $1.5 Billion Ethereum Hack
UAE-based cryptocurrency exchange Bybit has filed a civil lawsuit in a U.S. federal court against North Korea, its Reconnaissance General Bureau, and the state-sponsored hacking syndicate known as the Lazarus Group. The lawsuit seeks to hold the perpetrators accountable for the theft of approximately $1.5 billion in Ethereum during a massive cyberattack in February 2025.
Legal Action and Asset Freezing
The lawsuit was filed in the U.S. District Court for the District of Columbia. This move coincides with Bybit securing a preliminary injunction that prevents the transfer or liquidation of certain assets linked to the attack, pending the resolution of the legal proceedings.
This legal maneuver aims to halt the movement of funds believed to be associated with the heist, preserving them to maximize the chances of recovery. Concurrently, Bybit is continuing its rigorous on-chain tracking efforts to trace the stolen crypto assets.
Bybit’s CEO, Ben Zhou, stated:
"We are fully committed to protecting our users and recovering as much of the stolen assets as possible. We will relentlessly pursue the entities behind this attack and hold them legally liable."
Industry Implications and Security Concerns
This strategic move follows one of the largest hacks ever to target a cryptocurrency exchange. In February 2025, attackers successfully drained roughly $1.5 billion worth of Ethereum from wallets affiliated with the Bybit platform.
The unprecedented breach has amplified concerns regarding the security of digital asset trading platforms. It has also raised critical questions about the industry's capacity to safeguard customer funds and mitigate large-scale exploits, particularly given the rapid transfer of stolen assets across multiple wallets and blockchain networks.
By pursuing this judicial avenue, Bybit aims to broaden its asset recovery strategy rather than relying solely on technical blockchain tracing. The core objective is to legally freeze identifiable assets linked to the attack and prevent them from being liquidated or transferred.
A Landmark Test for Crypto Litigation
This civil lawsuit operates independently of the ongoing criminal investigation into the hack. While the civil case focuses squarely on asset protection, recovery, and holding the accused accountable within the U.S. judicial system, American law enforcement agencies are continuing their separate criminal probes.
The litigation is widely regarded as a crucial test of cryptocurrency platforms' ability to leverage legal instruments in tandem with blockchain analytics to combat major cyberattacks. This is especially pertinent in cases where stolen funds are dispersed across a vast array of wallets and decentralized platforms.
A successful outcome for Bybit—whether freezing a portion of the assets or recovering them—would significantly bolster investor confidence in the resilience of crypto exchanges against major breaches. Conversely, prolonged recovery delays or subsequent attacks could intensify pressure on the sector, inviting stricter regulatory scrutiny over cybersecurity standards and user fund protection.
In the interim, the platform is striving to mitigate the attack's impact on its user base and prevent collateral damage across the broader cryptocurrency market. However, recovering the entire stolen amount remains a profoundly complex challenge, given the velocity at which digital assets can traverse different networks and jurisdictions.