What happened
A UK court granted Bybit an injunction on Thursday freezing crypto assets connected to the hack that drained the exchange earlier this year, according to CryptoBriefing. The order targets wallets and downstream counterparties that received portions of the stolen balance after it left Bybit's cold-storage infrastructure. Ben Zhou's team has been pursuing a parallel civil track since the breach, working with on-chain investigators and law-enforcement partners to trace flows across bridges and mixing services.
The injunction is a proprietary and freezing order in form, meaning any regulated firm holding the flagged assets in the UK now faces contempt risk if they move them. Bybit has not published the full list of frozen addresses. The exchange said earlier this year that customer funds were made whole from its own reserves, so the recovery push is on Bybit's own balance sheet, not client claims.
Why it matters
This is the second major step this cycle where an exchange has used civil courts to lock down state-linked hack proceeds instead of waiting on sanctions or indictments. The US Treasury can designate a mixer. A court can freeze the coins already inside one.
Those are different levers, and Bybit just pulled the faster one. It matters for two reasons. First, it puts every downstream custodian on notice: if you're holding wallets that trace to the Bybit hack, you now have a documented court order to point at, and no plausible deniability if you keep processing withdrawals.
Second, it raises the operational cost of laundering for the Lazarus playbook, which relies on speed through bridges and mixers before compliance teams catch up. The headline reads like a win. The flow picture will tell us whether it actually is.