Skip to content
Bybit Hack: $1.5 Billion Theft by North Korean Hackers

Bybit Hack: $1.5 Billion Theft by North Korean Hackers

First seen 9 Jun 2026, 17:13 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster June 10, 2026 at 16:34 UTC
  • The Bybit hack resulted in a $1.5 billion loss, making it one of the largest in crypto history.
  • North Korean hackers exploited a supply chain vulnerability, highlighting risks in third-party security.
  • The incident raises significant geopolitical concerns, linking state-sponsored cyber operations to financial crimes.

In February 2025, a major hack on the Bybit cryptocurrency exchange resulted in the theft of $1.5 billion in Ethereum. The attack was attributed to the North Korean Lazarus Group's TraderTraitor subunit, exploiting a supply chain compromise through social engineering on a Safe{Wallet} developer. This breach accounted for 69% of the total $2.02 billion stolen by North Korean hackers in 2025. The incident highlighted vulnerabilities in the crypto exchange ecosystem, particularly the reliance on third-party security providers. The FBI confirmed the link to the Lazarus Group, emphasizing the geopolitical implications of such cyberattacks. The hack raised concerns about the long-term viability of investments in centralized exchanges, as investors face increasing operational risks. Following the breach, discussions around stricter regulations and enhanced security measures have intensified in the industry.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 101d ago How this analysis works

Timeline

2025-02-01
Bybit hack occurs
North Korean hackers stole $1.5 billion in Ethereum through a supply chain compromise, exploiting a developer's credentials.
www.ainvest.com
2025-02-10
FBI links hack to Lazarus Group
The FBI confirmed the involvement of the Lazarus Group, a North Korean cyber unit, in the Bybit hack.
www.ainvest.com
2025-06-01
Total losses from North Korean hacks reported
North Korean hacking groups were reported to have stolen over $2.02 billion in 2025, with Bybit accounting for 69% of this total.
www.ainvest.com
2026-06-09
Bybit hack discussed in relation to IPO Genie
Recent articles connect the Bybit hack to investor concerns over centralized exchanges and the IPO process, highlighting systemic risks.
Streetinsider

More articles in this cluster (2)

Following this threat?

Track Lazarus Group, TraderTraitor and Bybit in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed