Bybit Files RICO Lawsuit Against Lazarus Group Over $1.5B Breach
Bybit has filed a civil lawsuit in the U.S. District Court for the District of Columbia, invoking the Racketeer Influenced and Corrupt Organizations (RICO) Act against the Lazarus Group and the Democratic People's Republic of Korea (DPRK). The litigation follows a $1.5 billion breach involving sophisticated TTPs, including suspected API exploitation, social engineering, or zero-day vulnerabilities. Technical evidence suggests the use of custom malware and Command & Control (C2) infrastructure, with stolen assets laundered through cross-chain bridges and mixing protocols such as Tornado Cash and Sinbad. This case aims to categorize state-sponsored cyber operations as a continuous criminal enterprise to facilitate civil asset recovery and establish a legal precedent for cyber-warfare litigation.