Share this article

Greece Makes First Crypto Seizure Tied to North Korea's $1.5B Bybit Hack

The Hellenic Anti-Money Laundering Authority issued a freezing order, locking the assets and preventing them from being transferred.

Jul 9, 2025, 6:03 p.m.
Bybit lost roughly $1.5 billion in crypto to a theft Friday. (appshunter.io/Unsplash)
(appshunter.io/Unsplash)

What to know:

  • Greek authorities said they have carried out the country's first cryptocurrency seizure, freezing funds linked to the $1.5 billion Bybit hack.
  • The Hellenic Anti-Money Laundering Authority issued a freezing order, locking the assets and preventing them from being transferred.
  • The seizure is part of a broader effort to recover stolen funds, with around $72 million (5% of the stolen ether) frozen and $870 million now unaccounted for.

Greek authorities have carried out the country’s first cryptocurrency seizure, blocking access to funds lifted from February’s record $1.5 billion Bybit hack linked to North Korea’s Lazarus Group.

The Hellenic Anti‑Money Laundering Authority traced a suspicious transaction to a wallet that on‑chain data tied to the initial theft. That wallet, according to Greece’s Minister of Economy and Finance Kyriakos Pierrakakis, was tied to a “Greek platform providing exchange services.”

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

Analysts, according to a blog post, used Chainalysis Reactor to map the flow of funds to establish “a definitive connection between the cryptocurrency in the suspect user’s wallet and the primary wallets used in the Bybit hack,” the post adds.

The evidence allowed the agency to issue a freezing order, locking the assets before they could disappear. Per Pierrakakis, the Hellenic Anti-Money Laundering Authority’s operations have allowed for around 10 million euros ($11.7 million) to be retuned to victims. It’s unclear whether any of these returns are related to the recent seizure.

The hackers have in the past moved funds through mixers such as Wasabi and Tornado Cash, cross‑chain bridges and peer‑to‑peer desks.

Bybit’s public LazarusBounty dashboard suggests that about $72 million, 5% of the stolen ether, has now been frozen, while a third remains traceable. Around $870 million stolen from Bybit have now “gone dark,” according to the dashboard.

Більше для вас

Protocol Research: GoPlus Security

GP Basic Image

Що варто знати:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

Більше для вас

Stablecoin Adoption Is ‘Exploding' — Here's Why Wall Street Is Going All-In

Stablecoin networks (Unsplash, modified by CoinDesk)

Alchemy co-founder and president Joe Lau said stablecoin adoption is exploding as banks, fintechs and payment platforms push beyond the USDT/USDC exchange era.

Що варто знати:

  • Stablecoin usage is quickly broadening from crypto-native exchanges into payments, payroll and treasury as companies chase 24/7, digital-native settlement, according to Alchemy Co-founder and President Joe Lau.
  • Banks are pushing tokenized deposits as a regulated, bank-native alternative that delivers stablecoin-like benefits for institutional clients.
  • The endgame is a two-track system — stablecoins for open, two-party settlement; deposit tokens for bank ecosystems, until scale forces convergence and competition, Lau said.