Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [QUIET] · [BUSINESS]

4 clusters · 19 sources · 30 days · First seen about 2 months ago · Last updated 28 days ago

Lazarus Group cryptocurrency theft and litigation

Overview

The North Korean-linked Lazarus Group continues to engage in large-scale cryptocurrency thefts and movements. In late July 2026, the group transferred approximately $7.7 million in Bitcoin, part of a long-term pattern of laundering stolen digital assets.

In August 2026, the cryptocurrency exchange Bybit filed a civil RICO lawsuit in the U.S. District Court for the District of Columbia against North Korea, its Reconnaissance General Bureau, and the Lazarus Group. The suit seeks to recover approximately $1.5 billion stolen during a February 2025 cyberattack involving the theft of over 400,000 ETH and stETH. The attackers, identified by the FBI as North Korean actors known as “TraderTraitor” and linked to the Lazarus Group, reportedly compromised a developer's computer at Safe{Wallet} to inject malicious code and drain the wallet. Bybit CEO Ben Zhou stated that the exchange's priorities are “protecting users, recovering assets, and holding attackers accountable.”

Following the lawsuit, a U.S. federal court issued a preliminary injunction and granted Bybit expedited discovery to aid in fund recovery. This legal order allows Bybit to request account identities, balances, and transaction histories from platforms with U.S. operations. While Bybit has recovered approximately $48.4 million and frozen an additional $30.5 million across more than 28 global exchanges, the company reports that roughly 90.2% of the stolen funds remain untraceable due to the use of mixers, cross-chain bridges, and decentralized swaps.

Lazarus Group activity remains high; in late August 2026, the group moved 244.148 Bitcoin valued at approximately $19.42 million, an action analysts suggest marks an exit from “sleep mode” for those specific wallets. This follows another large movement in August involving 262.2 BTC valued at roughly $16.64 million.

Entities

Lazarus Group · Lookonchain · Reconnaissance General Bureau · Arkham Intelligence · Bybit

Claims

What the coverage asserts, and how many sources carry each claim.

[● 9 SOURCES] Bybit filed a civil lawsuit against North Korea, its Reconnaissance General Bureau, and the Lazarus Group in the U.S. District Court for the District of Columbia.
[● 8 SOURCES] Bybit has recovered approximately $48.4 million in stolen assets.
[● 8 SOURCES] Over $30.5 million in stolen funds has been frozen across more than 28 exchanges and custodians.
[● 5 SOURCES] The lawsuit seeks recovery of about $1.5 billion stolen in February 2025.
[● 5 SOURCES] The FBI attributed the February 2025 theft to North Korean cyber actors known as TraderTraitor.
[● 4 SOURCES] A preliminary injunction was issued freezing the identified stolen digital assets.
[● 4 SOURCES] Bybit CEO Ben Zhou said the company's focus is protecting users, recovering assets, and holding attackers accountable.
[● 4 SOURCES] Approximately 90.2% of the $1.5 billion stolen in the February 2025 hack is considered untraceable due to use of mixers and cross-chain swaps.
[● 4 SOURCES] A U.S. federal judge granted Bybit expedited discovery to request account identities and transaction histories from U.S.-linked platforms.
[● 3 SOURCES] The theft involved over 400,000 ETH and stETH.
[● 3 SOURCES] U.S. law-enforcement agencies are conducting a parallel criminal investigation.

Timeline

28 days ago

[TECHNOLOGY] 3 sources
Lazarus Group moves $19.4 million in Bitcoin
North Korea-linked Lazarus Group has moved 244.148 Bitcoin, worth approximately $19.42 million, signaling a potential new phase of cryptocurrency laundering activity.
about 2 months ago

[BUSINESS] 12 sources
Bybit sues North Korea and Lazarus Group over $1.5B crypto hack
Bybit has sued North Korea and the Lazarus Group in a U.S. court following a $1.5 billion crypto hack. A judge has granted asset freezes and expedited discovery to aid recovery efforts.
about 2 months ago

[BUSINESS] 8 sources
Bybit sues North Korea and Lazarus Group over $1.5 billion crypto hack
Bybit filed a U.S. civil lawsuit against North Korea and the Lazarus Group to recover $1.5 billion stolen in a February 2025 crypto hack, securing an injunction to freeze identified stolen assets.
about 2 months ago

[CRIME] 3 sources
Lazarus Group shifts $7.7 million in Bitcoin, market reaction muted
Lazarus Group moved 121.5 BTC ($7.74 M) on July 30 2026; Bitcoin price stayed steady. The transfer follows years of large crypto thefts by North Korean hackers.

Sources

abmedia.io · ambcrypto.com · analyticsinsight.net · assodigitale.it · bitcoinethereumnews.com · criptotendencias.com · crypto.news · cryptobreaking.com · cryptonomist.ch · en.coin-turk.com · europesays.com · eurweb.com · flagthis.com · inversion.es · it-boltwise.de · mycryptoparadise.com · news.bitcoin.com · nu-vera.com · tronweekly.com

This summary has been updated 4 times: see revision history