TL;DR
Bybit has sued North Korea and the Lazarus Group, securing a temporary court order to freeze stolen cryptocurrency assets. This marks a significant step in combating cybercrime in crypto. The case highlights ongoing concerns over state-sponsored cyberattacks targeting digital assets.
Cryptocurrency exchange Bybit has taken legal action against North Korea and the Lazarus Group, a notorious cybercrime organization linked to Pyongyang, securing a temporary court order to freeze assets believed to be stolen in recent cyberattacks. This is the first known legal effort of its kind to recover stolen crypto through a court-ordered asset freeze against a nation-state-backed hacking group, emphasizing the growing intersection of cybersecurity and financial law.
According to PR Newswire, Bybit filed a lawsuit in an undisclosed jurisdiction, alleging that the Lazarus Group, which has previously been linked to North Korean state interests, orchestrated a series of cyberattacks targeting its platform and customers. The court granted a temporary injunction to freeze assets believed to be stolen or held by the group, marking a historic move in cryptocurrency asset recovery efforts.
Sources familiar with the case confirmed that the court’s order includes provisions to prevent the transfer or liquidation of the targeted assets, which are believed to include a significant amount of cryptocurrencies stolen during recent breaches. The legal action aims to set a precedent for holding state-sponsored cybercriminal groups accountable through civil litigation and court enforcement.
Bybit has not disclosed specific figures or the total amount of assets frozen but emphasized that the legal move is part of a broader strategy to combat cybercrime and protect its users’ assets. The case is ongoing, and the court has scheduled a hearing to determine whether the assets can be permanently seized or returned.
Legal Landmark in Crypto Asset Recovery
This case represents a significant development in the fight against cybercrime targeting cryptocurrencies. By leveraging legal channels to freeze assets linked to a state-sponsored hacking group, Bybit is setting a precedent that could influence future efforts to hold nation-states accountable for cyberattacks. The move underscores the increasing importance of legal and regulatory measures in safeguarding digital assets and combating cyber threats in the crypto space.

TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet
- Proven Security: Over 9 years, no remote hacks
- Secure Private Keys: Military-grade EAL6+ chip security
- Easy Wallet Management: Tap to access 90 blockchains
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Rise of Cyberattacks by State-Linked Groups
The Lazarus Group, associated with North Korea, has been implicated in numerous high-profile cyberattacks over the past decade, including the 2017 WannaCry ransomware incident and various cryptocurrency heists. Despite international sanctions and cybersecurity efforts, North Korean cyber units continue to target digital assets for funding their activities. Legal actions against such groups are rare, making this case by Bybit a notable exception.
Historically, efforts to recover stolen crypto have focused on tracing and seizing assets through blockchain analysis and international cooperation. However, civil litigation and court orders to freeze assets are less common, especially against state-backed groups. This case signals a potential shift toward more assertive legal strategies.
“This legal action marks a new chapter in the fight against cybercriminals and state-sponsored hacking groups targeting our industry.”
— Bybit spokesperson

Yubico – Security Key C NFC – Basic Compatibility – Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
- Security Protection: Protects against phishing attacks
- Wide Compatibility: Works with 1000+ accounts including Google, Microsoft, Apple
- Easy Authentication: USB-C plug-in or NFC tap for quick login
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Legal and Practical Challenges in Asset Seizure
It is still unclear how effective the court-ordered freeze will be in permanently recovering or seizing the assets, especially given the complex nature of blockchain transactions and potential efforts by the Lazarus Group to move assets abroad. Additionally, the legal process is ongoing, and the final outcome remains uncertain.
As an affiliate, we earn on qualifying purchases.
Next Steps in the Legal and Recovery Process
The court will hold a hearing to determine whether the assets can be permanently seized or returned to Bybit and its users. Further legal actions may follow, including international cooperation to trace and recover additional assets. The case could also inspire similar legal strategies against other cybercriminal groups linked to nation-states.

TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet
- Proven Security: Over 9 years, no remote hacks
- Secure Private Keys: Military-grade EAL6+ chip security
- Easy Wallet Management: Tap to access 90 blockchains
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is the Lazarus Group?
The Lazarus Group is a cybercrime organization believed to be linked to North Korea, known for cyberattacks, including cryptocurrency thefts and ransomware campaigns.
How did Bybit manage to secure a court order to freeze assets?
Bybit filed a civil lawsuit in an undisclosed jurisdiction, which resulted in a court granting a temporary injunction to freeze assets believed to be stolen by the Lazarus Group. Details of the legal process are not fully public yet.
Can the assets be permanently recovered?
The court has scheduled a hearing to decide on the permanent seizure or return of the assets. The effectiveness of the freeze depends on legal proceedings and blockchain tracing efforts.
Why is this case significant?
This is the first known legal effort to freeze assets linked to a nation-state-backed hacking group, potentially setting a precedent for future cybercrime litigation in the crypto industry.
What are the implications for other crypto exchanges?
The case may encourage exchanges and regulators to pursue more aggressive legal actions against cybercriminal groups, especially those with state backing, to protect user assets and uphold security standards.
Source: primary