Bybit v. DPRK Lazarus Group -- $1.5B Hack Civil Lawsuit (August 2026)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
Summary
On August 7-8, 2026, cryptocurrency exchange Bybit announced that it had filed a civil lawsuit in the U.S. District Court for the District of Columbia against the Democratic People's Republic of Korea (DPRK), its Reconnaissance General Bureau (RGB), and the Lazarus Group over the February 21, 2025 theft of approximately $1.5 billion in Ethereum-denominated assets -- the largest recorded cryptocurrency theft in history. Alongside the lawsuit, the court granted a preliminary injunction freezing identified stolen assets held by unnamed intermediary defendants. This is the first known instance of a major cryptocurrency exchange filing civil suit against a nation-state actor for a crypto theft and securing a judicial asset freeze order at this scale.
Connected Entities
1 entitiesTimeline(8 events)
2025-02-19
Malicious JavaScript code replaces legitimate Safe{Wallet} app code at 15:29 UTC, targeting Bybit's Ethereum multisig cold wallet, per Verichains forensic analysis.
Bybit Hack Traced to Safe{Wallet} Supply Chain Attack -- The Hacker News2025-02-21
Approximately $1.5 billion in Ethereum and stETH stolen from Bybit cold wallet at approximately 14:13 UTC during a routine transfer, in what becomes the largest recorded cryptocurrency theft in history.
FBI/IC3 Public Service Announcement2025-02-26
FBI issues public advisory (IC3 PSA250226) attributing the theft to TraderTraitor (Lazarus Group), listing 50 Ethereum wallet addresses and requesting assistance from exchanges and analytics firms to block transactions.
FBI/IC3 PSA2502262025-04-30
German federal authorities (BKA) and Frankfurt's Public Prosecutor's Office shut down cryptocurrency mixer eXch, seizing approximately $38.2 million and 8+ terabytes of data. Elliptic estimates more than $200 million in Bybit stolen funds were laundered through eXch.
German Operation Shuts Down Crypto Mixer eXch -- The Record2025-11-28
Swiss and German authorities dismantle Cryptomixer.io following coordinated actions in Zurich, seizing approximately 25 million euros in Bitcoin. Cryptomixer was linked to laundering proceeds from the Bybit hack.
Swiss, German Authorities Dismantle Cryptomixer.io -- Yellow.com2026-06-18
Bybit files civil lawsuit under seal in U.S. District Court for the District of Columbia naming DPRK, RGB, and Lazarus Group as defendants; court grants a temporary restraining order (TRO) the same day.
Bybit Sues North Korea and Lazarus Group -- PR Newswire2026-07-30
U.S. District Court for the District of Columbia grants partial preliminary injunction prohibiting transfer or dissipation of identified stolen assets held by John Doe defendants; court finds Bybit 'demonstrated a likelihood of success on the merits.'
Bybit Sues North Korea and Lazarus Group -- PR Newswire2026-08-07
Bybit publicly announces the civil lawsuit and preliminary injunction. Reports $48.4 million recovered and $30.5 million frozen across 28+ exchanges -- approximately 5.26% of stolen funds. Case described as a landmark first in crypto civil litigation against a nation-state.
Bybit Sues North Korea and Lazarus Group over $1.5 Billion Hack, Secures Asset Freeze -- CoinDeskDecision Log
- #3review revise-6⛓ pending8/25/2026, 2:46:33 AMhash: 8dYEjtRTfRgfGLub6cVhjDXz7EEyN49YP8XQWpN973er
- #2review⛓ pending8/25/2026, 2:46:33 AMhash: 2oPQJNBdYYroZVg2Dr2JyzuxmwJVXRfMxcJcmQ8AiC3o
- #1publish⛓ pending8/24/2026, 11:13:11 PMhash: D4iyi3AQcc2YLqYeuoA5pZHr3WSgSepGcDd4yejDrNwx
20 of 20 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/24/2026, 11:12:41 PM
last updated: 8/25/2026, 5:10:28 AM
avoid.net — verified advice for a post-truth world