The Bybit hack of February 2025 was linked to the North Korean Lazarus Group, which allegedly used malicious code to steal $1.4 billion in crypto assets

Quotes that support claims

North Korean hacking group Lazarus targeted Bybit in late February by injecting malicious code into SafeWallet, a third-party wallet platform used by the exchange, to steal billions in customer assets.

By saying ‘gone dark,’ Zhou indicated that 20% of the stolen funds had been successfully mixed, laundered or sent to platforms that obscure transactions by the North Korean hackers