The Global Story: How North Korean hackers launched history's biggest heist
Mar 9, 2025
auto_awesome
Joe Tidy, BBC cyber correspondent, delves into the staggering $1.5 billion heist attributed to North Korea's Lazarus Group. He discusses the shocking theft of Ethereum from the Bybit platform, revealing the urgent crisis management of its CEO. Tidy also highlights the broader implications for digital finance security and explores North Korea's strategic cybercrime efforts amid international sanctions. With the U.S. considering a crypto reserve, he questions the growing vulnerability of cryptocurrency markets to such high-profile attacks.
The unprecedented $1.5 billion heist from Bybit highlights the growing sophistication of cyber threats, particularly from state-sponsored groups like Lazarus.
Bybit's resilient crisis management and the launch of initiatives like the Lazarus Bounty illustrate the urgent need for improved security in the cryptocurrency sector.
Deep dives
The Largest Crypto Heist in History
A significant incident occurred when the cryptocurrency trading platform Bybit was hacked, resulting in the theft of approximately $1.5 billion in just two minutes. This incident marks the largest crypto theft ever recorded, surpassing previous large-scale hacks like the Ronin Network, which involved a $600 million theft. The attack was executed by exploiting a transfer mechanism used to move funds from cold wallets, which are typically more secure, to hot wallets. Analysts suspect North Korea's Lazarus Group, known for state-sponsored cybercrimes, to be behind this unprecedented heist, raising alarms about the increasing sophistication of cyber threats.
Bybit's Response and Recovery Efforts
After the hack, Bybit's executives, including the CEO, were initially taken aback, believing they were processing a legitimate transaction. Realizing the massive scale of the loss, they quickly organized a crisis communication effort, keeping customers informed through live streams. Bybit sought assistance from investors to recover from the financial impact while launching an initiative called the Lazarus Bounty, encouraging crypto enthusiasts to help track and freeze the stolen funds. Despite losing an enormous amount of money, Bybit showcased resilience by managing to recover some losses through proactive measures.
The Role of North Korea in Cybercrime
The forensic tracking of the stolen funds revealed that they were funneled to addresses linked to North Korea's Lazarus Group, a notorious hacking entity associated with state-sponsored cybercrime. This group's operations have evolved to focus heavily on financial theft, driven by the country's economic challenges and international sanctions. With the rise in successful hacks, North Korea is believed to have developed a complex system for training skilled hackers and laundering stolen cryptocurrencies, demonstrating an alarming level of sophistication in their cyber operations. This situation underscores vulnerabilities within the crypto sector, highlighting the need for enhanced security measures in the face of such organized criminal activity.
In February, hackers stole almost $1.5bn from the crypto trading platform, Bybit. Intelligence agencies blame Lazarus, an elite hacking group linked to North Korea. As the US announces a strategic crypto reserve, are we more vulnerable to cyber threats than ever before?
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode