Bybit
EU · MiCA Authorised
Is this your listing? Claim it
Licensing: Genuine licence held (the EU/EEA (MiCA))
Audit & reserves: Not yet researched
Bybit holds a genuine crypto-specific licence covering the EU/EEA (MiCA). It first appears in our register on 2025-05-28 and is currently tracked across 29 jurisdictions through 1 legal entity.
Countries covered (29)
- 🇦🇹Austria
- 🇧🇪Belgium
- 🇧🇬Bulgaria
- 🇭🇷Croatia
- 🇨🇾Cyprus
- 🇨🇿Czechia
- 🇩🇰Denmark
- 🇪🇪Estonia
- 🇫🇮Finland
- 🇫🇷France
- 🇩🇪Germany
- 🇬🇷Greece
- 🇭🇺Hungary
- 🇮🇸Iceland
- 🇮🇪Ireland
- 🇮🇹Italy
- 🇱🇻Latvia
- 🇱🇮Liechtenstein
- 🇱🇹Lithuania
- 🇱🇺Luxembourg
- 🇳🇱Netherlands
- 🇳🇴Norway
- 🇵🇱Poland
- 🇵🇹Portugal
- 🇷🇴Romania
- 🇸🇰Slovakia
- 🇸🇮Slovenia
- 🇪🇸Spain
- 🇸🇪Sweden
Get an email if Bybit's status changes
Notable incidents
Hand-researched and checked against multiple independent sources before publishing — not an automated feed, and deliberately not exhaustive. Listed here because they were large and well-documented enough to matter for understanding Bybit's risk profile, not because we're implying anything about brands without an entry here.
- Security incident 2025-02-21
Cold wallet hack — ~$1.5B in ETH stolen
Attackers compromised the Safe{Wallet} multisig interface Bybit used to sign transactions from its ETH cold wallet, tricking signers into approving a malicious transaction, and drained roughly $1.5 billion -- the largest crypto exchange hack on record. The FBI publicly attributed the theft to North Korea's Lazarus Group (tracked as "TraderTraitor"). Bybit said it remained solvent throughout, backed by bridge loans from other exchanges, and continued honouring withdrawals. Bybit later sued North Korea and the Lazarus Group in US federal court (filed June 2026), recovering roughly $48.4 million of the stolen funds so far, with a preliminary asset freeze granted by the court.
Sources: FBI Internet Crime Complaint Center (IC3) ↗ · CoinDesk (lawsuit update) ↗
What others report
Third-party ratings, not verified by us — each figure links to its original source. Kept separate from the regulator-sourced facts above and the first-party user reports below.
- App Store 46,890 reviews View on App Store ↗ Retrieved 2026-09-02
User reports
Community-sourced and reviewed before publication. Kept strictly separate from the regulator-sourced data above.
Loading reports…
Do you use Bybit from your country? Report your experience
In the news
Automated keyword matches against headlines from The Guardian, BBC, Cointelegraph, The Block, and the SEC's and DOJ's own press releases — tagged Regulatory when it's from a regulator directly or the headline itself uses regulatory language, General otherwise. Neither is a claim these are about Bybit specifically, or relevant to its regulatory status. Read before drawing any conclusion.
Is Bybit the best crypto exchange for you?
There's no such thing as the best crypto exchange in absolute terms — only the best fit for a given person's situation. The right choice for a business that needs a clean, auditable compliance trail is rarely the right choice for an individual just holding a small amount long-term, and both are different again from someone trading derivatives professionally. We don't recommend Bybit, or anyone else — we give you what's independently verifiable so you can make that call yourself.
Here's what we've actually verified about Bybit, specifically:
- Holds a genuine crypto-specific licence in the EU/EEA (MiCA).
- Tracked across 29 jurisdictions through 1 legal entity, appearing in our register since 2025-05-28.
- We haven't yet researched Bybit's audit or proof-of-reserves history — that's an unresearched gap, not a red flag.
- 1 publicly documented incident on file, most recently "Cold wallet hack — ~$1.5B in ETH stolen" (2025-02-21) — see Notable incidents below for what happened and how it was handled.
- Third-party ratings we track: 4.69/5 on App Store (46,890 reviews) — not verified by us, see What others report below.
None of this tells you whether Bybit is right for you — that depends on what you're trying to do, which jurisdiction you're in, your own risk tolerance, and practical details this register doesn't track (fees, product range, day-to-day UX). What it does give you is what's actually checkable, so you're deciding from facts rather than the exchange's own marketing.
Sources: ESMA interim MiCA register (CASPS.csv), retrieved 2026-08-31 — original file .