Bybit has filed a lawsuit against North Korea and the Lazarus Group and secured a preliminary injunction freezing stolen assets, in what the exchange describes as a landmark crypto asset recovery effort.
What Bybit alleges in its lawsuit against North Korea and Lazarus Group
The case names the Democratic People’s Republic of Korea as a defendant, according to the court docket for Bybit Technology Limited v. Democratic People’s Republic of Korea. The action pairs the North Korean state with the Lazarus Group, the hacking collective long linked to Pyongyang. For related coverage, see Fintech Revolution Summit –Singapore 2026.
Bybit says the suit seeks to recover assets taken from the exchange, framing it as a crypto asset recovery effort. The Lazarus Group is named alongside the state because it is identified as the actor behind the theft. Details of the broader campaign attributed to the group were covered in reporting on North Korean hackers targeting wallets across the industry.
Why the court order matters for Bybit and crypto enforcement
Bybit states it secured a preliminary injunction freezing the stolen assets. A preliminary injunction is a court order that can restrict movement of the targeted funds while the case proceeds, supporting efforts to trace and recover them. For related coverage, see Cyber ThaiX 2026.
The freezing measure is the central development in the filing, as detailed in Bybit’s move to freeze the stolen assets. U.S. authorities have also flagged the threat from North Korea-linked actors targeting crypto platforms in a public service announcement from the FBI’s Internet Crime Complaint Center.
What this case could signal for future exchange responses
Pairing a lawsuit with a court order points to a more aggressive legal posture than exchanges have typically taken after a breach. Bybit characterizes the effort as a landmark, which suggests it views the approach as a potential template for recovery.
For other platforms, the combination of civil litigation and asset-freezing orders could complement cybersecurity and compliance work already underway across the sector, including operational changes such as Bybit’s own adjustments to collateral ratios for UTA loans. Whether courts sustain the injunction as the case advances will determine how much of the frozen value Bybit can ultimately reclaim.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
