A historic cryptocurrency theft has rocked Dubai-based exchange Bybit, with hackers stealing an estimated $1.5 billion in digital assets — the largest such heist to date. Blockchain analysts and cybersecurity experts are attributing the attack to North Korea’s infamous Lazarus Group, a state-sponsored cybercrime syndicate linked to the regime’s weapons programs.
The breach occurred on February 21st, when hackers allegedly deployed malware to bypass security protocols and authorize fraudulent transactions, diverting funds into private wallets. Blockchain analytics firm Elliptic identified patterns in the laundering process, including mixing techniques and transaction routes, that align with Lazarus Group’s previous operations. The group, sanctioned by the UN for financing North Korea’s ballistic missile development, has stolen over $6 billion in crypto since 2017, according to recent reports.
Bybit CEO Ben Zhou confirmed the platform’s solvency, stating that client assets remain fully backed 1:1 and that withdrawals have resumed. However, only a fraction of the stolen funds has been recovered. To accelerate efforts, Bybit announced a staggering $140 million bounty — roughly 10% of the stolen amount — for individuals or entities aiding in tracing and freezing the assets. The reward will be split between those who help identify the hackers’ wallets and those who assist in asset recovery through legal or technical means.
The theft coincides with a broader crypto market slump, with Bitcoin and Ethereum prices dipping amid rising volatility. Despite recent fluctuations, Bitcoin’s value remains over 200% higher than its pre-2020 U.S. election levels, underscoring the asset’s enduring appeal despite security risks.
