Five-Year Prison Term for Man Behind 2016 Bitfinex Bitcoin Heist

Ilya Lichtenstein has been sentenced to five years in prison for stealing nearly 120,000 bitcoin from the cryptocurrency exchange Bitfinex in 2016. The U.S. Department of Justice announced the sentencing, detailing the methods Lichtenstein used to carry out and cover up the theft, as well as the subsequent laundering of the stolen funds.

In 2016, Lichtenstein, 35, infiltrated Bitfinex’s network using advanced hacking tools and techniques. Once inside, he authorized over 2,000 fraudulent transactions, transferring 119,754 bitcoin—valued at around $72 million at the time—into his personal wallet. To avoid detection, he deleted access credentials and log files from Bitfinex’s network, making it difficult for investigators to trace his actions.

Laundering the Stolen Bitcoin

After the hack, Lichtenstein and his wife, Heather Morgan, laundered 25,111 bitcoin, about 21% of the total stolen amount. They employed complex money-laundering methods, which prosecutors described as some of the most sophisticated ever encountered by IRS agents. These methods included:

• Using automated software to process transactions.
• Moving funds through darknet markets and cryptocurrency exchanges.
• Converting bitcoin to other cryptocurrencies, a practice called “chain hopping.”
• Depositing funds into cryptocurrency mixing services to obscure their origin.
• Using U.S.-based business accounts to legitimize their banking activities.
• Converting some stolen funds into gold coins.

Despite their efforts to hide their activities, Lichtenstein eventually revealed his role in the hack. Until then, authorities had only charged the couple with laundering the stolen bitcoin, not the actual hack.

Guilty Plea and Sentencing

In August 2023, Lichtenstein and Morgan both pled guilty to conspiracy to commit money laundering, a charge that carries a maximum sentence of 20 years. Prosecutors requested a five-year sentence for Lichtenstein, which he received. He will also serve three years of supervised release following his prison term.

Heather Morgan, known by her rapper name “Razzlekhan,” is set to be sentenced on November 18, with prosecutors recommending an 18-month sentence for her role in laundering the funds.

The Bitfinex hack remains one of the largest crypto heists in history. While Lichtenstein and Morgan laundered only a portion of the stolen bitcoin, the incident highlights the evolving sophistication of cybercrime and the challenges it presents to law enforcement. The stolen funds’ value has surged significantly since 2016, making this case even more notable in the cryptocurrency world.