Following the theft of $1.46 billion in cryptocurrency from ByBit, the exchange launched a bounty program to incentivize individuals and companies to track down the stolen assets. While many in the crypto investigative field view this initiative positively, experts warn of the trust implications for the industry.
ByBit Battles $1.5 Billion Theft with Crowdsourced Cyber Sleuths

ByBit Battles $1.5 Billion Theft with Crowdsourced Cyber Sleuths
The crypto exchange ByBit calls for bounty hunters to assist in recovering funds stolen by North Korea's Lazarus Group in what is deemed the largest crypto heist in history.
In a historic event shaking the foundations of the cryptocurrency world, ByBit, a prominent trading platform, has fallen victim to a staggering $1.46 billion theft attributed to North Korea's infamous Lazarus Group. In a bid to recover their losses, ByBit’s CEO Ben Zhou has turned to the public, announcing an innovative bounty program aimed at crowdsourcing cyber sleuths to assist in tracking down the stolen digital assets.
The hackers are currently engaged in a complex operation to launder the funds, attempting to rapidly cash out through multiple transactions designed to obscure the currency's origins. ByBit's response includes a newly launched website that not only offers monetary rewards for tips but also showcases a live leaderboard of successful bounty hunters.
Zhou encouraged the community to participate in their "war against Lazarus," providing a direct link to the bounty initiative. For every successful identification of frozen funds, ByBit allocates 5% of the reclaimed amount to both the informant and the companies that act upon the alerts. The website quickly began displaying sums in the millions awarded to astute investigators who assist in cutting off the hackers.
This approach has received praise from experts in blockchain investigations, with Tom Robinson from Elliptic calling it a "really positive innovation" that could mobilize skilled individuals to track down the stolen cryptocurrency. However, some legal experts caution that this heist could further damage trust within an already volatile crypto industry, highlighting concerns that such large-scale attacks might be replicated in the future.
In the decentralized world of cryptocurrency, ByBit finds itself reliant on the cooperation of other exchanges to help reclaim the stolen funds. Unfortunately, not all platforms are responding positively. eXch, a notable exchange known for facilitating anonymous transactions, has been accused of failing to cooperate with ByBit’s requests. Reports suggest that substantial amounts of the stolen cryptocurrency have been funneled through this exchange, raising further alarm over the anonymity and lack of regulatory oversight in the sector.
ByBit intends to extend its bounty initiative to other victims affected by the Lazarus Group, which has been linked to $6 billion worth of cryptocurrency thefts over the years. Although North Korea has never officially acknowledged any association with the Lazarus Group, researchers assert that these stolen assets are key to aiding the regime in evading international sanctions and funding its military ambitions.