Bybit has filed a lawsuit against North Korea over the $1.5 billion hack that hit its exchange in February 2025. The exchange has already obtained a court order freezing assets tied to the attack, and it has recovered $48.4 million so far, with another $30.5 million frozen.
A Court Order Freezes Assets
The lawsuit comes with a court order that freezes assets linked to the theft. That means any funds or property connected to the hack are now locked down, pending the legal process. Bybit hasn't said which court issued the order or how many accounts are affected, but the freeze is a concrete step toward clawing back some of what was taken.
The total frozen and recovered amount stands at $78.9 million. That's a real chunk of money, but it's a small slice of the $1.5 billion that disappeared from the exchange's wallets.
The Lazarus Group Connection
Investigators have attributed the hack to the Lazarus Group, a North Korean state-sponsored hacking unit. The group has a long history of targeting cryptocurrency exchanges, though this specific attack is one of the largest on record. Bybit's lawsuit names North Korea as the responsible party, leaning on the Lazarus Group's known state backing.
The February 2025 hack drained the exchange in a single, coordinated operation. Bybit has not disclosed exactly how the attackers got in, but the scale of the theft points to a well-resourced operation.
Recovery So Far
Bybit has recovered $48.4 million of the stolen funds, and an additional $30.5 million in assets has been frozen. That brings the combined total to $78.9 million. The exchange has been working with blockchain analysts and law enforcement to trace the movement of the stolen crypto, though it hasn't named any of those partners.
The recovered funds are a start, but the math is stark. The $78.9 million represents just over 5% of the total taken. The remaining $1.42 billion is still out there, and much of it may have been laundered or moved through mixers.
The $1.4 Billion Gap
The lawsuit is a legal escalation, but it doesn't automatically bring the money back. The court order freezes assets that have been identified, but tracking down the rest of the stolen funds is a separate, harder problem. North Korea has historically been able to move stolen crypto through complex chains, making recovery slow and uncertain.
For now, Bybit is pushing forward with the lawsuit and the asset freeze. The exchange has not said whether it expects to recover more, or how long the legal process might take. What's clear is that the bulk of the $1.5 billion remains unaccounted for.
