This week's biggest crypto hack news comes from a courtroom, not an exchange. Bybit, the world's second-largest crypto exchange by trading volume, has filed a civil lawsuit against North Korea, its Reconnaissance General Bureau, and the Lazarus Group, and has already secured a court order freezing stolen assets tied to the case.
The legal filing at the center of this crypto hack news, according to Bybit's official press release, shows the exchange filed suit in the U.S. District Court for the District of Columbia against the DPRK, its Reconnaissance General Bureau, and the Lazarus Group, the hacking group U.S. authorities have tied to the February 2025 cyberattack on Bybit. The court found Bybit "has demonstrated a likelihood of success on the merits" in the case.
Bybit also secured a preliminary injunction freezing identified stolen assets held by unnamed individuals and entities, listed in the case as John Doe defendants. The order is meant to preserve those assets while litigation continues.
Bybit CEO Ben Zhou said the company's focus "has never changed: protect our users first, recover what we can, and make sure the people behind these attacks are held accountable."
The lawsuit traces back to what the FBI's official confirms as one of the largest cryptocurrency thefts in history.
The FBI stated that North Korea was responsible for stealing approximately $1.5 billion in virtual assets from Bybit on or about February 21, 2025, an operation the bureau refers to as TraderTraitor.
The FBI noted the stolen funds were converted into Bitcoin and other assets, then spread across thousands of addresses on multiple blockchains, and published dozens of Ethereum addresses tied to the operation for exchanges and blockchain firms to block.
The recovery side of this crypto hack news shows real progress. Since the hack, Bybit says it has worked with blockchain analytics firms, exchanges, custodians, and international law enforcement to trace and freeze stolen funds. Key numbers from the press release:
Approximately $48.4 million in stolen assets has been recovered
Over $30.5 million has been frozen across more than 28 exchanges and custodians
German authorities dismantled the exchange eXch, and German and Swiss authorities disrupted Cryptomixer.io, both allegedly used to launder stolen funds
The civil case moves forward independently of any criminal investigation, though Bybit says it continues sharing blockchain intelligence with the FBI and other agencies, a detail worth watching as this crypto hack news develops further.
The exchange intends to seek additional judicial relief as proceedings advance and says it will keep investing in blockchain intelligence and cooperation with regulators to make large-scale cryptocurrency theft harder to pull off and easier to trace.
Bybit's lawsuit isn't the only accountability push this week. Senators Elizabeth Warren and Richard Blumenthal have separately asked the SEC to investigate President Trump's $TRUMP memecoin, citing reports of nearly a million investors losing over $3.81 billion.
The cases are unrelated, but both point to the same trend: formal legal and regulatory action, not informal pressure, is increasingly how crypto's bad actors get held accountable.
This round of crypto hack news marks a shift from purely technical recovery work toward direct legal action against a state-linked hacking group. With a preliminary injunction already in place and tens of millions of dollars recovered or frozen, Bybit's case could set a precedent for how exchanges pursue state-sponsored attackers through U.S. courts going forward.
This article is for educational and informational purposes only and should not be considered financial or investment advice. Always conduct your own research before making investment decisions.