Bitfinex exchange hackers transferred 94.6 thousand BTC to an unknown wallet

Brother

Professional
Messages
2,590
Reaction score
500
Points
83
bf27a35c26.png


The film company Amazon MGM Studios has launched production of the feature film Razzlekhan, which will tell the story of the hack of the Bitfinex cryptocurrency exchange for 120,000 BTC in 2016. Deadline reports this.

The film is based on a 2022 New York Times article about spouses Ilya Lichtenstein and Heather Morgan, accused of laundering stolen funds.

The film will be directed and written by Hannah Marks. The title of the film corresponds to Morgan's rap name.

In February 2022, US authorities detained the couple and confiscated $3.6 billion worth of bitcoins. That same month, Morgan was released on bail of $3 million. Liechtenstein remained in custody.

In August 2023, the couple pleaded guilty to conspiracy to commit money laundering. Morgan faces up to 10 years in prison, Lichtenstein - up to 20 years. The latter denies any connection with the Bitfinex hack.

According to court documents, Liechtenstein gained access to the exchange's network using "advanced hacking tools." He completed over 2,000 transactions, transferring 119,754 BTC from the exchange to his personal wallet. The defendant then deleted the access credentials and other browsing log files.

He and his wife laundered funds in a variety of ways, from using fictitious identities and mixing services to opening business accounts and buying gold coins.

Let us remind you that in 2022, the online cinema Netflix announced a documentary series about Morgan and Liechtenstein. Chris Smith (FYRE: The Festival That Turned Out To Be A Fraud) will direct.
 
At the money laundering trial in Washington, Ilya Lichtenstein, who confessed to committing one of the largest-ever thefts of bitcoins from the Bitfinex crypto exchange, spoke about the details of his crime.

Lichtenstein, acting as a witness cooperating with the US government, admitted that for several months he had access to Bitfinex systems, as well as hacked accounts on other cryptocurrency exchanges, including Coinbase and Kraken. Last year, he and his wife, a well-known social media rapper, confessed to conspiring to launder money related to the Bitfinex hack.

Lichtenstein testified about how he used the Bitcoin Fog cryptomixer up to 10 times to launder part of the stolen funds. The US attorney's office accuses Roman Sterlingov of running a mixer, claiming that tens of millions of dollars from drug trafficking in dark markets passed through it. Sterling's lawyer claims that the court has no evidence, such as witness statements or server logs, confirming Sterling's involvement in the management of the mixer.

Lichtenstein's testimony helped to better understand the motives behind the 2016 Bitfinex hack and the methods used to launder millions of dollars. Lichtenstein told the jury that he decided to hack the exchange because of problems with his startup in San Francisco: "At the time, my business was going through difficulties, and I felt very burned out because of it."

At the time of the couple's arrest, the U.S. government said they were trying to launder $4.5 billion in stolen bitcoins, of which the government managed to withdraw $3.6 billion, the largest financial seizure in history. Later, almost $1 billion more was seized in connection with the Bitfinex hack.

After gaining access to Bitfinex, Liechtenstein developed a method for storing customer passwords so that they could be used to access accounts on other exchanges. He admitted that although he used various mixers (including Bitcoin Fog) to mask the origin of stolen funds, such platforms were used to launder only a smaller part of the funds. In some cases, Liechtenstein invested money in cryptocurrency exchanges using other people's accounts purchased on the darknet. It is noted that part of the stolen money went to buy NFT, gold and Walmart gift cards.

Lichtenstein also noted that he eventually stopped using Bitcoin Fog and switched to other mixers that "better suited his goals." One of them is Helix, run by Larry Harmon, who pleaded guilty in 2021.

Mr. Lichtenstein was questioned by Mr. Sterlingov's lawyer about whether he knew Mr. Sterlingov personally or had any contact with him. Liechtenstein said no. The lawyer also asked Lichtenstein if he was under the influence of drugs at the time of the break-in after he had previously confessed to buying illegal substances in underground markets. Lichtenstein said he wanted to stay sober during the break-ins.

In February 2022, US authorities arrested Ilya Lichtenstein and his wife, Heather Morgan, and seized more than 94,000 BTC ($3.6 billion) from them. In August 2023, they pleaded guilty to laundering these funds.

In February 2024, the US government transferred $922 million worth of bitcoins from two cryptocurrency wallets that held funds confiscated from the couple. The US transfers occurred on February 28, when Bitcoin surged above $60,000 for the first time since November 2021.

• Source: https://www.bloomberg.com/news/arti...ya-lichtenstein-turned-us-cooperating-witness
 
Heather Morgan, who is accused of laundering billions of dollars worth of bitcoins related to the hacking of the Bitfinex exchange in 2016, is seen at several cryptocurrency conferences, in particular Bitcoin 2024. Her presence caused controversy in the community.

She is the one next to the waitress. pic.twitter.com/C25NLo30iV
— Demelza Hays, Ph.D. (@CryptoPhD) July 28, 2024

Bitcoin developer and co-founder of Bitcoin storage company Casa Jameson Lopp called the situation extremely suspicious. He called on the organizers of specialized events to consider Morgan as a source of threat and refuse her entry.

PUBLIC SERVICE ANNOUNCEMENT

Heather Morgan, AKA 'Razzlekhan' is a self proclaimed social engineer who pleaded guilty to hacking Bitfinex for 120,000 BTC back in 2016.

I crossed paths with her in Nashville this week. After asking around I discovered she has been spotted at… pic.twitter.com/HxQTgBlTmx
— Jameson Lopp (@lopp) July 28, 2024

Despite being charged and pleading guilty in August 2023, Morgan was released on $3 million bail in February 2022. Her husband and accomplice Ilya Lichtenstein is currently under house arrest. The judge found that he played a more significant role in planning the Bitfinex hack than his wife. The hearing of their case is scheduled for November 2024.

According to available information, Morgan presented herself at the events as a "Web3 consultant".

In a comment to Cointelegraph, Lopp suggested that the hacker has two reasons for attending crypto conferences. Either it is looking for opportunities to provide consulting services to pay court fines, or it is "an attempt to mitigate the sentence by collecting intelligence in the interests of the government."

Explaining the espionage theory, Lopp said that even a person ideologically opposed to the government will rarely prefer an additional prison term to cooperation.

The developer's position was criticized by X users. They considered the ban on attending bitcoin conferences contrary to the spirit of inclusivity and openness inherent in the industry.

In response, Lopp pointed out that no one is able to ban Morgan from using bitcoin, but the guests of the event should be protected from "known thieves" and other unscrupulous participants.
 
U.S. prosecutors have asked the court to sentence Heather Morgan to 18 months in prison for her role in laundering 119,754 BTC stolen from the Bitfinex exchange in 2016.

In 2022, law enforcement officers detained the spouses involved in the hacking - 34-year-old Ilya Lichtenstein and 31-year-old Morgan. More than 94,000 BTC worth $3.6 billion were seized from them at that time.

The couple was accused of conspiracy to launder proceeds. According to authorities, Lichtenstein was directly involved in the attack on the platform, but he denied it.

On August 3, 2023, the husband and wife pleaded guilty to a single count of money laundering. Liechtenstein faces up to 20 years in prison, for Morgan the maximum punishment can be up to 10 years. Sentencing is scheduled for November 14 and 15, 2024, respectively.

The prosecution justified such a noticeable reduction in the sentence for Morgan with "significant assistance" in the plea deal. She was involved in the crimes committed less than her husband and spent only a "small part" of the stolen goods.

In February 2022, the court released Morgan on bail of $3 million.

Prosecutors also pointed out that initially Morgan did not know about how Lichtenstein received the bitcoins. But by early 2020, he confessed to responsibility for the hack, and she began to help him.

"This was not a momentary oversight or an impulsive decision: the defendant knowingly participated in conspiracy to launder money and conspiracy to commit fraud over the years," the statement said.

According to law enforcement officers, Morgan and Lichtenstein used "various technologically sophisticated methods" to obfuscate their tracks, including the use of crypto exchanges without KYC procedures, darknet markets, and mixers.

Morgan used part of the stolen funds to buy gold coins, which she buried in a "secret place." Subsequently, the authorities revealed their whereabouts.

In addition to the 18-month term, prosecutors asked the court to confiscate cryptocurrency assets and property worth $7.6 billion previously seized from the couple to pay restitution to Bitfinex.

• Source: https://assets.bwbx.io/documents/users/iqjWHBFdfxIU/rNhe.no30LwA/v0

---

+ At the moment, Bitfinex is the only contender for damages from the hack in 2016, when 119,754 BTC were stolen from the platform.

The U.S. government said in a statement that it was not aware of other parties entitled to compensation. However, the authorities will tread carefully so as not to lose sight of any potential victims.

After the hack, Bitfinex distributed the losses among users, causing their balances to shrink by about 36%. In return, they were credited with issued BFX tokens. Coin holders could sell them on the market, buy them back at a fixed rate of $1, or exchange them for shares in the exchange's parent company, iFinex.

All BFX were redeemed within eight months.

Authorities admitted that despite Bitfinex's efforts to compensate those affected, there may still be "thousands of account holders" on the exchange who lost money in the hack. To solve the problem, the government proposed to create a website where potential victims can receive information and make their claims.

• Source: https://docs.dbnews.com/u/Bitfinex-Victim-Rights-Notification.pdf
 
In three weeks, on November 14 and 15 to be exact, 36-year-old Russian and US citizen Ilya Lichtenstein and his 34-year-old American wife Heather Morgan will be sentenced in the federal court of the District of Columbia in Washington.

Ilya's surname in America, of course, is pronounced "Lichtenstein", or even "Lichtenstin", but I will write and pronounce it in the old Russian way. Arrested in February 2022 in New York, where they lived, the couple were accused of laundering money earned by hacking and stealing approximately 120 thousand bitcoins from the international Hong Kong cryptocurrency exchange Bitfinex. In the affidavit of Christopher Janczewski, a special agent with the U.S. Internal Revenue Service, Morgan and Lichtenstein are accused of transferring stolen bitcoins "through thousands of transactions to more than a dozen accounts" on their own behalf and on behalf of their companies. According to the testimony, one such company was SalesFolk, Morgan's copywriting firm.

Allegedly, in June 2019, Morgan changed her personal bitcoin account to a business account she held on a virtual currency exchange (the service is designated "VCE 7" in court documents) "in order to attract less attention from VCE 7 to her transactions while she was selling her BTC en masse," the testimony says. However, the cloud account used by Lichtenstein led to the collapse of the alleged plan. Authorities decrypted a file that contained a list of 2,000 virtual accounts, as well as secret keys to them. According to the U.S. Department of Justice, almost all of these addresses were linked to the Bitfinex heist. Representatives of the ministry also reported that the cryptocurrency was transferred through organizations owned by Morgan.

After the arrest, the couple pleaded not guilty and were released on bail - he under 5 million, and she under 3 million dollars. On August 3, 2023, they made a deal with the prosecution, and Lichtenstein agreed to receive up to 20 years in prison for deceiving the United States and money laundering, and Morgan up to 5 years for the same plus fraud, but on a smaller scale. On October 9 and 15 of this year, U.S. Attorney for the District of Columbia Matthew Graves, through his assistants Christopher Brown and Jessica Peck, sent a "Memorandum in Aid of Sentencing" to Judge Colleen Collar-Kotelli, who is in charge of the case, in which the prosecutor's office asks the judge to sentence Hisel to one and a half years and Ilya to five years in prison, leaving the last word to the 81-year-old Collar-Kotelli. which was appointed by President Bill Clinton in 1997. During this time, she made a number of bold decisions and, in particular, in 2017 blocked the order of the Commander-in-Chief of President Donald Trump not to accept transgender people into military service.

On the one hand, the prosecutor's office advised the judge to be strict in sentencing Lichtenstein, as he "spent months developing a scheme to gain access to Bitfinex systems and carry out his attack," and on the other hand, to take into account that Ilya "will be able to use his considerable skills for legitimate purposes, and it is hoped that he will make a positive contribution to the areas of cybersecurity and anti-money laundering". The memorandum noted that "Liechtenstein's risk of recidivism is low", referring to his age at the time of the crime, while at the same time asserting that "unfortunately, the defendant fits the profile of many of the cybercrime defendants the government has faced. Many of them start as young people who acquire impressive technical skills from an early age. In adolescence, they feel socially isolated and seek out communities online. They are subjected to criminal activity in these online spaces, and this activity is normalized in such a way that its impact on the victims becomes trivial. They start engaging in online crime in their teens and become bolder because of their success – both in committing a crime and in not being caught." Of Heather Morgan, prosecutors wrote that "in a sense, she was drawn into a serious criminal scheme without her initial consent and undoubtedly felt compelled to support her out of a sense of devotion to her husband and a desire to keep them living together", which negates the seriousness of her behavior as she eventually joined her husband's plot and used her own skills, to help and strengthen his criminal undertakings".

Ilya Lichtenstein was born in 1987 in Rostov-on-Don. His great-great-grandfather and great-great-grandmother on his father's side, Jews Ber Gershevich and Gitel Moiseevna Vinokurov, were killed by the Germans in 1942. In 1993, when Ilya was 6 years old, his parents Evgeny Lichtenstein and Irina Shepotinskaya immigrated to the United States of America, where they settled in Illinois, their youngest son Michael was born there. Evgeny worked as a mortgage broker, and Irina taught at the university. Ilya graduated from high school and got a job as a technical assistant at Northwestern University in Evanston, where he worked for a year before entering the University of Wisconsin-Madison, where he received a bachelor's degree in psychology in 2010. During his years at university, Lichtenstein tried his hand at marketing, launching an advertising campaign for the Avanoo educational platform. After gaining experience, he founded Nexus Global Inc., which was engaged in affiliate marketing and lead generation, and in 2011, 24-year-old Ilya Evgenievich co-founded the MixRank service, created to track the effectiveness of advertising campaigns of brands and startups. At the same time, he began to provide services as a business consultant to various companies, including 500 Startups and SalesFolk. A new chapter in his business biography came in 2018, when Lichtentein moved to New York, where he continued to provide consulting services to Endpass and Demandpath, as well as investing. And so it went...

It is known about Heather Morgan that she was a promising student at the University of California, after graduating from which she went to Hong Kong, where she worked as an event organizer, applied for a master's degree in economics and founded her own copywriting company SalesFolk. From Hong Kong, she moved to Cairo, where she received a master's degree in economics and international development from the American University. In 2013, Morgan returned to California and got a job at Tamatem Inc., which produced mobile games in Arabic and participated in the 500 Startups incubator. Around the same time, Morgan founded SalesFo and met Ilya Lichtenstein, whom she interviewed for her YouTube channel in 2014 and asked him questions about his company, MixRank, in a video titled "Make Your First Million in Enterprise Sales Without Marketing Costs." In an article for Forbes in 2019, she hinted at problems with the law in the past and wrote that during a business trip to Asia she received some "threats of lawsuit", learned that her employees "adjusted the numbers" and was harassed by old friends, which is why she decided to become a rapper under the pseudonym Razzlekhan - a mixture of the expression "razzle-dazzle" and the name of Genghis Khan. By the way, Ilya Lichtenstein had a network pseudonym Dutch - "Dutchman". Later, Lichtenstein co-founded with Morgan a blockchain cybersecurity company called Endpass and an investment firm called DemandPath.

After their arrest in February 2022, Ilya and Heather were accused of stealing approximately 120 thousand bitcoins from the international Hong Kong cryptocurrency exchange Bitfinex. At the exchange rate on February 22, when this money was stolen, 1 bitcoin was worth $71 million, that is, they stole more than $4.5 billion, and at the same time, Forbes correspondent David Jeans called it "the largest hacker attack on a cryptocurrency exchange". The Deputy Minister of Justice for Criminal Affairs, Lisa Monaco, was of the same opinion. Before the arrests, the couple managed to find and seize about 95 thousand bitcoins in cryptocurrency wallets, and after the arrests, about $475 million more.
 
The U.S. Department of Justice announced on Thursday that Ilya Lichtenstein has been sentenced to five years in prison for his role in stealing about 120,000 Bitcoins {{BTCf}} from the Bitfinex exchange's Crypto.

The 35-year-old hacker breached the network in 2016 using "advanced hacking tools and techniques." Once inside the network, Liechtenstein fraudulently authorized more than 2,000 transactions, transferring 119,754 Bitcoins from Bitfinex to his own wallet. He then took steps to cover his tracks by removing access credentials and other log files from the Bitfinex network that could expose his behavior to law enforcement.

After the break-in, Lichtenstein and his wife Heather Morgan laundered the stolen funds. Morgan, also known by her rapper pseudonym "Razzlekhan", will be sentenced on November 18. Prosecutors recommended that she serve 18 months.

According to court documents, the pair managed to launder 25,111 Bitcoins — 21% of the total amount Lichtenstein stole from Bitfinex — using a network of Eastern European bank accounts and Bitcoin mixing services to hide the origin of the funds. Prosecutors described these techniques as "the most sophisticated money laundering techniques [IRS agents] have seen to date."

Among the methods they used were: using computer programs to automate transactions; placement of stolen funds in accounts on various Darknet markets and Cryptocurrency exchanges with subsequent withdrawal of funds; converting Bitcoin into other forms of cryptocurrency through a practice known as "on-chaining"; placement of part of the criminal proceeds in Cryptocurrency mixing services; the use of accounts of companies based in the United States to legitimize the banking activities of Liechtenstein and Morgan; and the exchange of part of the stolen funds for gold coins.

But despite their complexity, the former founder and leader of the Shadow Crew cybercrime cartel, Brett Johnson, told CoinDesk last year that some of Liechtenstein's money laundering techniques, such as using Coinbase accounts directly linked to it, "didn't make sense" and showed a lack of experience. "Ilya is a idiot. If you look at how he tried to launder money, he did absolutely everything wrong," Johnson said at the time.

Lichtenstein and Morgan were initially only suspected of money laundering until the former revealed himself as a hacker. None of them have been charged in connection with the actual Bitfinex hack, despite Lichtenstein claiming responsibility.

Instead, both pleaded guilty to ONE count of conspiracy to commit money laundering on August 3, 2023, a charge that carries a maximum sentence of 20 years in prison. In addition to receiving the five-year sentence requested by prosecutors, Liechtenstein will also serve three years under supervision.

Video:

Source
 
A US federal court sentenced Heather Morgan to 18 months in prison for participating in the laundering of 119,754 BTC stolen from the Bitfinex exchange in 2016.

Given Morgan's cooperation with the investigation, prosecutors requested 18 months in prison for her.

"I am very sorry and deeply sorry for the choice I made. I spent my time and energy doing harm, not good. And I am ashamed of it," she said during the hearings.

The defense sought to limit the sentence to 17 days spent in prison after her arrest and house arrest, under which Morgan has been since then.

However, the prosecution indicated that she was "deeply involved" in complex laundering schemes for bitcoins stolen by Lichtenstein.

Judge Colleen Kollár-Cotelly said Morgan's actions were deliberate and planned, and she did not stop breaking the law voluntarily before her arrest.

"The harm I caused will haunt me for the rest of my life," the defendant expressed remorse.

A few hours after the sentencing, Morgan published a video in which she said that she had remained silent all this time on the advice of her lawyers.

My statement #razzlekhan pic.twitter.com/janr9RD1Q2
— Heather "Razzlekhan" Morgan (@HeatherReyhan) November 18, 2024

"It's over, and I'm thrilled to be able to tell my story, share my thoughts and tell you more about the art and other endeavors I've been working on," she said.

Prior to her arrest, Morgan was known as a rapper under the nickname Razzlekhan, a blogger and an active influencer on social networks.
 
Top