FBI Pursues North Korean Hacker After Record $1.5 Billion Bybit Crypto Heist

In an unprecedented cyberattack, cryptocurrency exchange Bybit has suffered a $1.5 billion theft, marking the largest crypto heist to date. The U.S. Federal Bureau of Investigation has intensified its search for Park Jin Hyok, a North Korean hacker linked to the Lazarus Group, suspected of orchestrating this massive breach.

Bybit reported that during a routine transfer between digital wallets, an attacker manipulated the process, diverting approximately $1.5 billion worth of Ethereum to an unidentified address. CEO Ben Zhou assured customers that their remaining assets are secure, though withdrawal requests may experience delays. Zhou emphasized the company’s financial resilience, stating that Bybit can absorb the loss and remain solvent even if the stolen funds are not recovered.

The FBI has identified the Lazarus Group, also known as APT38, as the entity responsible for this theft. This group, comprising North Korean state-sponsored cyber actors, has a notorious history of high-profile cybercrimes. Park Jin Hyok, a key member, is allegedly involved in several significant cyber intrusions, including the 2014 Sony Pictures hack and the 2017 WannaCry ransomware attack. The FBI’s wanted list describes Park as a state-sponsored programmer involved in some of the costliest computer intrusions in history.

In response to the breach, Bybit has taken swift measures to mitigate the impact. The company conducted a fresh audit and restored its reserves to a 1:1 ratio within 72 hours of the incident. Blockchain analytics firm Lookonchain reported that Bybit purchased approximately 266,700 ETH, equivalent to $742 million, over two days to replenish its reserves. Zhou confirmed this development, stating that Bybit has fully closed the Ethereum gap caused by the hack.

The cryptocurrency community has been closely monitoring the movement of the stolen funds. Analysts have noted that the hackers face challenges in liquidating the stolen Ethereum due to potential blacklisting by major stablecoin issuers like Circle and Tether. This situation has led to discussions about the possible bullish impact on Ethereum’s price, as the removal of a significant amount of ETH from circulation could affect market dynamics.

This incident has raised concerns about the security of cryptocurrency exchanges and the broader implications for the market. Following the hack, major cryptocurrencies experienced declines. Bitcoin’s price dropped by 0.4% to $95,822, while Ethereum’s price decreased by 4% to $2,698. These downturns are attributed to a combination of the Bybit hack and broader macroeconomic and geopolitical events.

The Bybit heist surpasses previous major cryptocurrency thefts, including the $610 million Poly Network hack in 2021 and the $540 million Ronin Network breach in 2022. These recurring incidents underscore the persistent security challenges within the cryptocurrency industry. In 2024 alone, over $2 billion was lost to hacking, marking the fourth consecutive year of billion-dollar thefts in the sector.

The FBI’s pursuit of Park Jin Hyok and the Lazarus Group highlights the ongoing efforts to combat state-sponsored cybercrimes. The agency has previously linked the group to various cyberattacks, including the $41 million theft from Stake.com in 2023. These actions are part of a broader strategy to hold malicious cyber actors accountable and prevent future incidents.