Organization
Bybit
The Dubai-based cryptocurrency exchange from which about $1.5 billion in virtual assets was stolen in February 2025.
Stories on Angle
Background
Selected excerpts from Wikipedia. This is general background, not Angle's reporting, and it may have changed since the stories above were published.
Bybit is a Dubai-based cryptocurrency exchange that was originally founded in China. The platform has faced regulatory warnings in several jurisdictions.
In February 2025, the exchange was hacked resulting in the loss of $1.5 billion in assets, marking the largest cryptocurrency theft on record.
History
Bybit was founded in 2018 in Shanghai, China by Ben Zhou who had previously worked as the China general manager of the forex brokerage XM. After China banned cryptocurrency mining and trading in 2021, Zhou moved the team to Singapore.
In 2022, Bybit moved its headquartered to Dubai, United Arab Emirates.
In November 2023, the FTX bankruptcy estate sued Bybit for nearly $1 billion. It alleged that Bybit's investment arm Mirana prioritized withdrawals from FTX in November 2022 amid concerns about its solvency and withdrew nearly $500 million before withdrawals stopped. The suit claimed that Bybit used FTX assets to expedite withdrawals, blocked FTX from reclaiming $125 million, and devalued tokens worth tens of millions through BitDAO. FTX also contended that a token swap with Alameda Research in October 2021 was reversed in May 2023, when BitDAO restructured tokens, limiting redemption rights. In October 2024, Bybit settled its FTX case by paying $228 million.
On February 21, 2025, Bybit announced on X that it had been hacked. According to Bybit, about 400,000 Ethereum was stolen, which had an approximate notional value of $1.4 billion, making it the largest cryptocurrency exchange hack to date. The firm reported that it was able to replenish its reserves within 72 hours by securing 447,000 ether tokens through emergency funding efforts. The liquidity was provided by firms including Galaxy Digital, FalconX and Wintermute.
The attacker exploited vulnerabilities in Bybit's multi-signature wallet system, facilitated by compromised infrastructure at Safe{Wallet}, a third-party provider.
Blockchain analytics firms Arkham Intelligence and Elliptic claimed they were able to trace the hack to Lazarus Group, an advanced persistent threat tied to North Korea. The US Federal Bureau of Investigation also attributed the hack to North Korea, blaming "TraderTraitor actors".
Products
In June 2026, Bybit announced plans to offer retail customers access to tokenized initial public offerings at IPO prices through Payward's xStocks platform, beginning with SpaceX.
Sponsorships
In 2021, Bybit became a global main sponsor of the Argentina national football team under an initial two-year agreement. In August 2021, Bybit sponsored Ukrainian esports organization Natus Vincere (NAVI) in a three-year deal. Soon after, Bybit signed a similar agreement with Danish esports club Astralis featuring its branding on uniforms.
In early 2022, Formula One team Red Bull Racing announced a multi-year partnership with Bybit. The sponsorship ran through the 2022 to 2023 seasons, and concluded at the end of 2024 by mutual agreement.
Legal status
The platform has faced regulatory warnings in several jurisdictions.
In May 2025, Bybit was authorised as a crypto-asset service provider under the European Union's Markets in Crypto-Assets Regulation by the Austrian Financial Market Authority. On 4 August 2026, the Financial Market Authority granted Bybit Payments GmbH an electronic money institution licence, permitting it to issue electronic money and provide specified payment services.
Bybit entered Brazil in April 2022 and made an investment of US$50 million. In an act dated September 2, 2022, the securities regulator Comissão de Valores Mobiliários (CVM) ordered Bybit Fintech Limited to suspend any public offering of securities intermediation services to Brazilian investors, under threat of a daily fine of R$1,000. Bybit stopped offering derivatives to Brazilian users from September 15, 2022, while its spot trading continued.
As of September 2026, Bybit had more than 200,000 active users in Brazil with an operational office in São Paulo.
In June 2022, Bybit reached a settlement with the Ontario Securities Commission under which it agreed to pay more than US$2.4 million. In May 2023, it withdrew from the Canadian registration process and left Canada, telling its Canadian users that their positions would be liquidated if they did not withdraw their holdings by September 30, 2023.
In January 2025, Bybit suspended trading for users in India from January 12, while keeping withdrawals available, as it sought registration as a virtual digital asset service provider with the Financial Intelligence Unit – India (FIU-IND). In an order dated January 31, 2025, India's Financial Intelligence Unit (FIU-IND) fined Bybit ₹92.7 million for violations of the Prevention of Money Laundering Act, after finding that the exchange had continued providing services in India without mandatory registration. Bybit subsequently paid the penalty and registered with FIU-IND.
In July 2024, Indonesia's communications ministry blocked the Instagram accounts of Bybit, Bybit Indonesia and several other cryptocurrency exchanges. The ministry said that it blocked such accounts only at the request of the Financial Services Authority (OJK) or the commodity futures regulator Bappebti, and Bappebti said that the blocked companies were not licensed to operate in Indonesia. …
From the Wikipedia article Bybit (revision of ). Wikipedia contributors; selected plain-text excerpts from this revision. Formatting, reference markers and non-prose material removed. Available under Creative Commons Attribution-Share Alike 4.0. Identity from Wikidata (CC0).