Bitfinex hacker sentenced to 60 months for laundering $4.5B in stolen Bitcoin

Ilya Lichtenstein, who pleaded guilty to theft and laundering charges last year, was sentenced to 60 months in prison. He was sentenced for laundering and stealing nearly 120,000 Bitcoin, currently valued at $10.5 billion, from Bitfinex, a global crypto exchange. 

Bitfinex hacker laundered the stolen crypto with his wife’s help

In 2016, Ilya Lichtenstein bypassed Bitfinex’s network security, initiating over 2000 transactions and redirecting 119,754 Bitcoin from Bitfinex to his personal wallet. At the time of the theft, the stolen Bitcoin was worth $71 million, but it rose to $4.5 billion by the time he was apprehended in 2022. At current Bitcoin prices, the stolen assets are worth over $10.5 billion.

According to the U.S. Department of Justice, after Lichtenstein siphoned crypto from Bitfinex accounts, he made efforts to prevent law enforcement from catching on to his actions. He deleted some access credentials and log files from the Bitfinex network and later laundered the stolen crypto with the help of his wife, Heather Morgan. 

He and his wife, Morgan, established online accounts under false identities and used computer programs to automate transactions. They transferred the stolen Bitcoin into other accounts in dark web markets and cryptocurrency exchanges, later withdrawing some of the funds and converting Bitcoin to other forms of cryptocurrency. 

The Internal Revenue Service agents characterized these laundering methods as intricate. 

In their sentencing memo, prosecutors also noted:

“He became one of the greatest money launderers that the government has encountered in the cryptocurrency space. […] Over half a decade, the defendant engaged in what IRS agents described as the most complicated money laundering techniques they had seen to date.”

~Prosecutors

In August 2023, Lichtenstein pleaded guilty to all the charges against him, which could have earned a maximum 20-year prison sentence. On Thursday, Judge Colleen Kollar-Kotelly, in U.S. District Court in Washington, D.C., granted him a five-year prison term with three years of supervised release. However, he will receive credit for the 29 months he has served in custody since his arrest, which could translate into his release in just two years.

Heather Morgan could receive an 18-month prison term

Lichtenstein’s wife, Heather Morgan, will be sentenced on Monday, November 18, for her involvement in money laundering. Prosecutors have described Morgan as a “lower-level participant” in the scheme, hence requesting only an 18-month prison sentence for her.

TRM Labs, a blockchain intelligence platform, commented on the overall case, stating that law enforcement should improve the tools and techniques they use to identify and track crypto crime as it continues to evolve.