Bybit Secures Injunction Against Frozen North Korean Crypto Assets

Bybit has won an injunction to freeze cryptocurrency linked to a massive North Korean hack that occurred in February 2025. The heist, which remains the largest theft from a crypto exchange on record, saw attackers exploit a vulnerability in Safe{Wallet} multisig software used by Bybit, making off with approximately $1.5 billion in Ethereum.

The attack was attributed to North Korean state-sponsored hackers within days, linking it to a broader pattern of cyber operations sponsored by the Democratic People's Republic of Korea. According to Chainalysis, North Korean hackers have stolen a cumulative $6.75 billion in cryptocurrency assets across multiple campaigns over the years.

Bybit has been pursuing a multi-pronged recovery strategy, which includes coordinating with other platforms, offering financial incentives for the return of stolen funds, and now civil litigation in US federal court. The preliminary injunction is designed to prevent whatever remains of the stolen assets from being moved while the case proceeds.