The article attributes the February 2025 theft from Bybit to the North Korean state-linked Lazarus Group, citing coordination among Bybit, the FBI, and blockchain-security firms. It says attackers bypassed Safe{Wallet} validation and rapidly transferred roughly $1.3–$1.5 billion in ETH and liquid-staking assets through automated transactions. The stolen funds were distributed across numerous wallets, bridged across networks, converted largely into BTC, and further obscured through thousands of addresses and privacy services. Bybit froze affected wallets, promised to cover customer balances, and worked with exchanges and investigators, but the article says only a small fraction of the assets was frozen.