- Bybit has secured a court order to freeze identified assets linked to the hack.
- About $48.4M has been recovered while another $30.5M remains frozen across 28+ platforms.
- Investigators continue tracing stolen funds as legal and enforcement actions expand.
Bybit’s efforts to recover funds stolen in the February 2025 hack have reached a new legal phase after the exchange sued North Korea, its Reconnaissance General Bureau, and the Lazarus Group in a U.S. federal court.
The case also targets unidentified individuals and entities allegedly holding or moving stolen assets. A preliminary injunction now prevents the transfer or dissipation of identified assets linked to the case, creating a legal mechanism to preserve funds while the proceedings continue.
Bybit Hack Recovery Gains Court Protection
The lawsuit was filed in the U.S. District Court for the District of Columbia. Bybit said the action targets the Democratic People’s Republic of Korea, its Reconnaissance General Bureau, and Lazarus Group, which U.S. authorities have identified as responsible for the February 2025 attack.
The court granted a preliminary injunction covering identified stolen assets held or moved by John Doe defendants. The court also found that Bybit had demonstrated a likelihood of success on the merits.
The civil case operates separately from criminal investigations by U.S. authorities. Bybit continues to share blockchain intelligence and investigative findings with agencies, including the FBI.
How Much Crypto Has Been Recovered?
Bybit said approximately $48.4 million in stolen assets has been recovered since the attack. Another $30.5 million has been frozen across more than 28 exchanges and custodians while legal and investigative processes continue.
The figures show that asset recovery does not end when investigators identify stolen funds. When those assets reach exchanges or custodians, legal action can help prevent their movement while authorities and other parties determine the appropriate next steps.
Bybit said its investigation has involved blockchain analytics firms, exchanges, custodians, and international law enforcement agencies working to trace the stolen assets and disrupt related laundering networks.
Why Recovering the Remaining Funds Is Difficult
The recovery effort remains incomplete, with most of the stolen cryptocurrency still outside the amounts recovered or frozen. Bybit has continued tracing the assets as they move through different addresses and services.
Authorities have also taken action against infrastructure allegedly connected to the laundering of illicit proceeds. German authorities dismantled the cryptocurrency exchange eXch, while German and Swiss authorities later disrupted Cryptomixer.io.
Related: After Bybit Hack, European Regulators Now Question if OKX Was Involved
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
