CRITICALData Breach
Verified
Global

Lazarus Group Linked to $1.5B Bybit Cryptocurrency Heist

Thursday, March 19, 2026 at 02:00 PM UTC·Source: FBI / Chainalysis

Updated: Friday, March 20, 2026 at 09:00 AM UTC

Executive Summary

FBI attributes the $1.5 billion Bybit cryptocurrency exchange hack to North Korea Lazarus Group. Largest crypto theft in history.

Analysis

FBI confirmed Lazarus Group stole approximately $1.5 billion in crypto assets from Bybit through a sophisticated supply chain compromise of the Safe{Wallet} multisig infrastructure. Attackers compromised a developer machine to inject malicious code into the transaction signing process. Funds being laundered through chain-hopping and mixing services.

Timeline

Discovered
Feb 21, 2026
Exploitation Detected
Feb 21, 2026
Published
Mar 19, 2026
Source Attribution

Originally published by FBI / Chainalysis on Mar 19, 2026. Verified by: FBI, Chainalysis, TRM Labs.

Related Threats