US court backs Bybit in tracing $1.5B North Korea hack funds
Court grants Bybit expedited discovery to trace assets from the $1.5B hack linked to North Korea.

A US court has ruled in favor of Bybit, allowing the crypto exchange to pursue expedited discovery as part of its effort to trace funds stolen in a $1.5 billion hack attributed to North Korean state-sponsored actors.
The court order lets Bybit request account identities, balances, and transaction histories from platforms operating in the United States. This procedural step is intended to accelerate the identification of where the stolen assets may have moved.
The hack, one of the largest in crypto history, involved the theft of ether from Bybit's wallets earlier in 2025. Security researchers have linked the attack to North Korea's Lazarus Group, which has been responsible for numerous high-profile crypto heists.
While the ruling does not guarantee recovery of the stolen funds, it gives Bybit a legal tool to seek information from US-connected services that may have handled any portion of the assets.