FBI seizes $3.6bn in Bitcoin after New York 'tech couple' arrested over Bitfinex robbery
- Reference: 1644355472
- News link: https://www.theregister.co.uk/2022/02/08/bitfinex_arrests_cryptocurrency/
- Source link:
Ilya Lichtenstein, 34, and Heather Morgan, 31, husband and wife, are expected to appear in a Manhattan court this afternoon on charges that the pair conspired to launder 119,754 Bitcoin (BTC) [1]taken from Hong Kong-based exchange Bitfinex in 2016.
"In a futile effort to maintain digital anonymity, the defendants laundered stolen funds through a labyrinth of cryptocurrency transactions," said Deputy Attorney General Lisa Monaco in [2]a statement . "Thanks to the meticulous work of law enforcement, the department once again showed how it can and will follow the money, no matter what form it takes."
[3]
According to Monaco, the feds have seized more than $3.6bn in cryptocurrency linked to the Bitfinex hack, representing the largest financial seizure ever. At the time the funds were stolen in August 2016, a single BTC traded for about $540, making 119,754 BTC worth about $65m. Today, one BTC sells for roughly $43,170, making the total haul worth about $5.2bn; it was valued at around $4.5bn at the time the feds filed their court documents.
[4]
[5]
The accused Lichtenstein founded marketing biz MixRank and decentralized identity platform Endpass, and is a venture investor with Demandpath; Morgan is the CEO of marketing firm SalesFolk, a partner in Demandpath, and, according to her LinkedIn page, a former rapper, fashion designer and surrealist artist. Judge for yourself below.
[6]Youtube Video
[7]
Lichtenstein and Morgan are charged with conspiracy to commit money laundering and conspiracy to defraud the US government but not for the hacking of Bitfinex or theft. Nonetheless, according to the feds, the funds stolen from Bitfinex, through a series of around 2,000 transactions, are alleged to have ended up in a digital wallet controlled by Lichtenstein.
Amazingly, Heather Morgan gave a talk at NYC Salon (an event I used to run with [8]@ruthienachmany ) in 2019Here's her talk: [9]pic.twitter.com/RFovec0tek — Tarun Chitra (@tarunchitra) [10]February 8, 2022
The feds say they have recovered 94,000 BTC, worth about $3.6bn at the time of seizure. Over the past five years, they claim, about 25,000 BTC made its way out of Wallet 1CGA4s, controlled by Lichtenstein, through various intermediary accounts, and into financial accounts controlled by the pair.
"[B]eginning in or around January 2017, a portion of the stolen BTC moved out of Wallet 1CGA4s in a series of small, complex transactions across multiple accounts and platforms," explained IRS investigator Christopher Janczewski in his affidavit
[11]PDF
. "This shuffling, which created a voluminous number of transactions, appeared to be designed to conceal the path of the stolen BTC, making it difficult for law enforcement to trace the funds."Despite these efforts, said Janczewski, authorities traced the stolen BTC to multiple accounts controlled by Ilya "Dutch" Lichtenstein, a Russian-US national living in New York, and his wife Heather Morgan.
Alleged money laundering flow
Janczewski's affidavit details the maze of transactions the pair allegedly used to launder the stolen funds. It describes: accounts set up with fictitious identities; efforts to move the stolen funds in small amounts to avoid detection; the use of computer programs to automate transactions; layering stolen funds by depositing them into various virtual currency exchanges and darknet markets then withdrawing them to obfuscate the transaction history; converting BTC to other cryptocurrencies on different blockchains ("chain hopping"); and using US-based business counts to make transactions appear legitimate.
[12]Bitcoin drops 7 per cent on New York Attorney General's allegations of $850m fraud by Bitfinex
[13]Broken BitBank Bitfinex shaves 36% from all accounts
[14]As it turns out, no, you can't just run an unlicensed Bitcoin money exchange
[15]Bitcoin bank Bitfinex suffers major breach
Apart from the 25,000 BTC said to have been laundered since the Bitfinex hack, most of the stolen funds remained in Wallet 1CGA4s from August 2016 until January 31, 2022. That's when the feds gained access, according to Janczewski, "by decrypting a file saved to Lichtenstein’s cloud storage account, which had been obtained pursuant to a search warrant."
"The file contained a list of 2,000 virtual currency addresses, along with corresponding private keys," said Janczewski. "Blockchain analysis confirmed that almost all10 of those addresses were directly linked to the hack."
"Criminals always leave tracks, and today’s case is a reminder that the FBI has the tools to follow the digital trail, wherever it may lead," said FBI Deputy Director Paul Abbate.
[16]
The pair, if convicted, face up to 20 years in prison on the money laundering charge and up to five years on the charge of defrauding the US. The IRS would now [17]like a word too, presumably. ®
Get our [18]Tech Resources
[1] https://www.theregister.com/2016/08/03/67m_in_bitcoin_stolen_as_hacking_typhoon_lashes_hong_kongs_bitfinex/
[2] https://www.justice.gov/opa/pr/two-arrested-alleged-conspiracy-launder-45-billion-stolen-cryptocurrency
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YgL2G-5ccUiKeIDtxec8oAAAAEE&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YgL2G-5ccUiKeIDtxec8oAAAAEE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YgL2G-5ccUiKeIDtxec8oAAAAEE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://www.youtube.com/watch?v=_DIuPPmY9mw
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YgL2G-5ccUiKeIDtxec8oAAAAEE&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://twitter.com/ruthienachmany?ref_src=twsrc%5Etfw
[9] https://t.co/RFovec0tek
[10] https://twitter.com/tarunchitra/status/1491104365683552256?ref_src=twsrc%5Etfw
[11] https://www.justice.gov/opa/press-release/file/1470186/download
[12] https://www.theregister.com/2019/04/26/bitfinex_fraud_claims/
[13] https://www.theregister.com/2016/08/08/broken_bitbank_bitfinex_shaves_36_from_all_accounts/
[14] https://www.theregister.com/2018/08/20/teen_bitcoin_exchange/
[15] https://www.theregister.com/2016/08/03/bitcoin_bank_brazenly_borked/
[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YgL2G-5ccUiKeIDtxec8oAAAAEE&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[17] https://www.theregister.com/2021/05/21/cryptocurrency_us_treasury/
[18] https://whitepapers.theregister.com/
Uploading the private keys to an illegal $5 billion crypto fortune to an American cloud provider has got to rank as one of the stupidest things it's possible to do.
Or a cloud provider in any other country where a search warrant could be obtained.
It just goes to show that law enforcement can get results by simply using the age-old due process.
And it also goes to show that somebody else's computer you don't control is somebody else's computer you don't control.
Which part of
"Take the Bitcoin and Run!" were they not bright enough to figure out?
Probably only get a slap on the wrist as they broke the $250M mark by more than an order of magnitude. Might even be Knighted.
So, Lisa Monaco nabbed Ilya Lichtenstein
And now Andrea Andorra must be getting very worried.
Re: So, Lisa Monaco nabbed Ilya Lichtenstein
After getting their Bitcoin tracing skills up to speed will the FBI work back further to trace the history of the loot before it was deposited in the exchange? It would be a shame to hand it all back if they can't be sure it was legit before it was nicked by these two.
Cynical? Moi?
Being done for laundering, but not the actual theft? Does that mean feds still aren't sure how it was done?
If the exchange was in HK a US court might not have jurisdiction over the theft.
Hmmm...
[1]We told you so?
[1] https://forums.theregister.com/forum/all/2021/10/27/uk_teen_google_ad_48_bitcoin_scam_website/#c_4357063