news · Security incidents
Bybit theft: FBI attributed February 2025 incident to North Korea
The advisory described approximately $1.5 billion stolen and subsequent movement across several blockchains.
Bybit theft of February 2025
Project dossier · EN coverage
The evidence in one view: source records, cited claims and the editions that put them into context.
Security incidents · Source record: Feb 26, 2025 · Checked: Oct 23, 2026
- Cited claims
- 2
- Source records
- 2
- Related editions
- 3
What the evidence supports
Only claims cited in the visible editions appear here. Each retains its own evidence status.
- Source reported
The FBI's February 26, 2025 advisory attributed the approximately $1.5 billion Bybit theft to North Korean TraderTraitor activity and described movement across multiple blockchains.
Supporting excerpt: North Korea Responsible for $1.5 Billion Bybit Hack
converted some of the stolen assets to Bitcoin and other virtual assets
North Korea Responsible for $1.5 Billion Bybit Hack ↗ - Source reported
FBI guidance recommends stopping further payments and preserving transaction details when cryptocurrency investment fraud is suspected.
Supporting excerpt: Cryptocurrency Investment Fraud
the most important information you can provide are transaction details
Cryptocurrency Investment Fraud ↗
Source register
Related coverage
analysis · Security incidents
Bybit: attribution, root cause and recovery are three different claims
An official theft advisory can establish a useful attribution without answering every technical or financial question.
guide · Security incidents
Read a blockchain theft advisory without overclaiming what it proves
Separate the incident date, attribution, address evidence and any later recovery statement.