Bybit Secures U.S. Asset Freeze Tied to $1.5B Lazarus Hack in Court
Bybit has secured a preliminary injunction for a U.S. asset freeze tied to the alleged $1.46–$1.5 billion Lazarus (North Korea-linked) hack, according to a report dated around Aug. 8, 2026. The U.S. court order blocks the movement of specific, identified assets connected to the case, though the exact covered dollar amount was not disclosed.
The action builds on an FBI Public Service Announcement from Feb. 26, 2025 that attributed the theft to North Korea-linked actors (tracked as TraderTraitor or Lazarus Group) and circulated Ethereum addresses for industry-wide blocking. Bybit previously responded to the Feb. 21, 2025 incident by launching “LazarusBounty,” a recovery initiative aimed at incentives and structured freezing/recovery steps.
This is a legal freeze, not a recovery of funds. It may strengthen Bybit’s ability to prevent dissipation of flagged assets within U.S. jurisdiction, increasing compliance screening pressure for exchanges and service providers. For traders and market participants, the practical effect is that some portions of the stolen flow could be slowed or immobilized, but cross-chain routes, mixers, and non-U.S. infrastructure may still allow adversaries to pivot.
What to watch next: additional court filings could expand the identified asset set or convert the preliminary relief into a longer-lasting order. Any public updates from Bybit’s LazarusBounty program on further freezes or recoveries—and new law-enforcement address advisories—could also affect how much of the stolen value remains effectively immobilized. The “US asset freeze” is therefore an incremental enforcement milestone rather than an immediate market-clearing event.
Neutral
The news is a legal enforcement step rather than an exchange operational shock. A U.S. court-backed US asset freeze can temporarily immobilize some identified stolen flows, potentially reducing near-term risk of funds cycling through regulated on-ramps/off-ramps. However, because only specific assets are targeted and the article notes that cross-chain swaps, mixers, and non-U.S. infrastructure may still enable adversaries to pivot, the macro impact on total market liquidity is likely limited.
In similar past cases where law enforcement and courts moved quickly on flagged wallet addresses, markets sometimes saw short-lived sentiment dips for affected venues, but broader crypto price action was often driven more by overall risk appetite (rates, leverage, BTC/ETH momentum) than by the eventual pace of recoveries. Here, traders may see incremental compliance tightening (more screening, fewer transfers) and occasional headline-driven volatility, yet a full “firebreak” for stolen value across all jurisdictions is unlikely until additional filings expand the freeze scope or large recoveries are announced.
So the expected effect is neutral: supportive for compliance and long-term deterrence, but not strong enough to change the market’s direction by itself in the short term.