Bybit will pursue North Korea and the Lazarus Group in a US federal courtroom over last year’s record-breaking crypto theft. The exchange filed a civil lawsuit naming the regime directly as a defendant.
The complaint targets the Democratic People’s Republic of Korea, its Reconnaissance General Bureau intelligence agency, and the Lazarus Group hacking unit. It was filed in the US District Court for the District of Columbia.
The lawsuit stems from the February 2025 theft of roughly $1.5 billion in crypto from Bybit. That heist remains the largest cryptocurrency theft on record.
Bybit also named a group of unidentified individuals and entities as John Doe defendants. These placeholders let the exchange pursue anyone currently holding or moving traceable stolen funds.
Suing a sanctioned state carries an obvious limitation. There is no practical mechanism to enforce a judgment against North Korea itself.
The John Doe strategy works around that problem. It gives Bybit a legal path to unmask wallet holders and intermediaries who can actually be pursued in court.
The exchange has already secured a preliminary injunction. It freezes identified stolen assets held by those unnamed defendants while the litigation proceeds.
A federal judge found Bybit had shown a likelihood of success on the merits. The court separately described the original theft as one of the largest cryptocurrency thefts in history.
Bybit co-founder and CEO Ben Zhou framed the case as an industry-wide issue rather than a company-specific grievance. He said the Lazarus attack undermined trust across the entire crypto sector.
Recovery efforts have produced modest results so far relative to the scale of the theft. Bybit has recovered about $48.4 million, with a further $30.5 million frozen across roughly two dozen exchanges.
That leaves the large majority of the stolen $1.5 billion still unaccounted for. The civil suit is designed to run alongside, not replace, ongoing criminal investigations by US law enforcement.
Bybit said the legal action combines blockchain intelligence, international cooperation, and court-ordered remedies into one recovery strategy.











