US court freezes assets from $1.5B hack

TLDR

A United States court has frozen a slice of funds tied to Bybits massive 1.5 billion dollar crypto hack, giving the exchange legal backing to pursue recovery.

1. The District Court in Washington granted expedited discovery, restraining orders, and a preliminary injunction that preserves hacked assets on multiple platforms.
2. The hack, attributed by the FBI to North Koreas Lazarus Group, saw 1.5 billion dollars stolen, with only about 78.9 million dollars so far recovered or frozen.
3. Next steps are extended discovery, further freezes, and broader regulatory moves on cross border laundering, but most stolen funds likely remain unrecoverable.

Deep Dive

1. Court Order And Case Details

Bybit filed a civil lawsuit in the U.S. District Court for the District of Columbia against North Korea, its Reconnaissance General Bureau, and the Lazarus Group over a 1.5 billion dollar theft that hit the exchange on 21 February 2025, an operation the FBI links to the TraderTraitor cyber crew.

Judge John D. Bates granted expedited discovery and a temporary restraining order on 19 June 2026, later renewed and followed by a partial preliminary injunction on 30 July that freezes identified assets at exchanges and custodians, as detailed in Bybits update and reporting by crypto.news.

Bybit reports about 48.4 million dollars already recovered and approximately 30.5 million dollars frozen across more than 28 venues, giving a total of 78.9 million dollars in assets secured, although the injunction has not yet resulted in damages being paid out.

2. Scale Of Loss And Recovery Limits

Despite the court orders, Bybits own figures show how hard recovery is. When it filed the complaint on 18 June 2026, it estimated that 90.2 percent of stolen assets had become untraceable after mixing, cross chain hops, and OTC off ramps, with only 9.8 percent still tied to known wallets.

Industry analysis finds that less than 5 percent of funds in major hacks is typically recovered once laundering cycles complete, a pattern highlighted in broader research on stolen crypto flows by outlets such as Bitcoin.com.

3. Broader Enforcement And What To Watch

The case is notable because it targets a nation state and its associated hacking group in a civil suit, pairing litigation with asset freezing orders to complement ongoing FBI criminal investigations and sanctions.

For the wider market, this strengthens the precedent that courts can compel U.S. linked exchanges and custodians to reveal wallet connections and hold suspect funds, which may shape how platforms respond to future large scale breaches and state backed attacks.

Investors should watch for further announcements on additional freezes, any eventual damages ruling in Bybits case, and parallel policy moves that tighten controls on mixers, cross chain bridges, and lightly regulated OTC channels that currently enable rapid laundering at global scale.

Conclusion

The U.S. court freeze in the Bybit hack shows that legal tools can lock up tens of millions before stolen crypto fully disappears into laundering pipelines, but it also underscores that most value is lost once attackers move quickly. Recovery efforts, sanctions, and new regulatory frameworks will matter for future incidents, yet operational security and fast detection remain the main line of defense for exchanges and users.