Skip to main content
AVOID.NET

Bitfinex Hack

avoid.net/bitfinex-hack→0/100·97% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-10-27 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 10 to 0. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·4nhTZg…PZSY

Summary

On August 2, 2016, the Hong Kong-based cryptocurrency exchange Bitfinex was breached by Ilya Lichtenstein, who exploited weaknesses in the exchange's BitGo multi-signature wallet setup to authorize roughly 2,000 withdrawals and steal about 119,756 BTC, worth approximately $72 million at the time. Bitfinex socialized the loss across all customers with a 36.067% haircut and issued BFX recovery tokens, which it fully redeemed or converted to equity by April 2017. In February 2022 the U.S. Department of Justice arrested Lichtenstein and his wife Heather Morgan and seized about 94,000 BTC worth $3.6 billion, then the largest financial seizure in DOJ history; both pleaded guilty in August 2023, were sentenced in November 2024 and have since been released early, while the return of the recovered bitcoin to Bitfinex remained incomplete as of mid-2026.

Connected Entities

5 entities · 60 linked investigations
Organizations
Protocols
⌂Bitfinex / Tether26⌂Bitfinex Hack 2016⌂Bitfinex Hack
Tokens
Relationships
  • Bitfinex Hack 2016→mentioned with→Bitcoin(70%)
  • Bitfinex Hack→mentioned with→Bitcoin(60%)
  • Bitfinex Hack 2016→mentioned with→Bitfinex / Tether(80%)
  • UNUS SED LEO→mentioned with→Bitfinex / Tether(80%)
  • Bitfinex / Tether→mentioned with→Bitfinex Hack(80%)
  • Bitfinex Hack 2016→mentioned with→UNUS SED LEO(80%)
  • Bitfinex Hack 2016→mentioned with→Bitfinex Hack(80%)
  • UNUS SED LEO→mentioned with→Bitfinex Hack(80%)
  • Bitfinex / Tether→mentioned with→Bitcoin(60%)
  • Bitfinex Hack→mentioned with→Bitfinex / Tether(80%)
  • + 1 more

Connected Through

4 shared actors · 443 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Bitfinex Hack?

Timeline(12 events)

August 2016

Ilya Lichtenstein breaches Bitfinex (August 2), executing about 2,000 unauthorized withdrawals totaling roughly 119,756 BTC (about $72 million) to a wallet under his control.

2016 Bitfinex Hack - Wikipedia

August 2016

Bitfinex publicly discloses the breach and halts all trading and withdrawals; bitcoin's price falls approximately 20%.

The Bitfinex Bitcoin Hack: What We Know (And Don't Know) - CoinDesk

August 2016

Bitfinex applies a 36.067% 'generalized haircut' to all customer balances and issues BFX tokens at 1 BFX per $1 of loss.

2016 Bitfinex Hack - Wikipedia

2017

Lichtenstein and Morgan move a large portion of the stolen funds through the darknet market AlphaBay, using it as a bitcoin mixer.

Bitfinex Hack Money Launderers Plead Guilty - Chainalysis

April 2017

Bitfinex announces (April 3) that all outstanding BFX tokens have been redeemed at $1.00 or converted to iFinex equity.

100% Redemption of Outstanding BFX Tokens — Bitfinex Blog

February 2022

The DOJ arrests Lichtenstein and Morgan in New York City (February 8) and seizes about 94,000 BTC worth roughly $3.6 billion, then the largest financial seizure in DOJ history.

Two Arrested for Alleged Conspiracy to Launder $4.5 Billion in Stolen Cryptocurrency — DOJ

May 2023

OCCRP reports that Bitfinex commissioned and withheld a confidential Ledger Labs report identifying security failures that enabled the 2016 hack.

Confidential Report Flags Bitfinex Security Lapses in Huge 2016 Hack — OCCRP

August 2023

Lichtenstein and Morgan plead guilty in Washington, D.C. federal court (August 3); Lichtenstein admits for the first time to carrying out the 2016 hack.

Husband and Wife Plead Guilty to Money Laundering Conspiracy - DOJ

November 2024

Lichtenstein is sentenced (November 14) to 60 months in federal prison and three years of supervised release.

Bitfinex Hacker Sentenced in Money Laundering Conspiracy - DOJ

November 2024

Heather Morgan is sentenced to 18 months in federal prison (November 18 per CoinDesk; November 14 per the bitfinex-hack-2016 page).

Bitfinex Hack Launderer Heather 'Razzlekhan' Morgan Sentenced - CoinDesk

2025

A U.S. federal court orders in-kind restitution of about 94,000 BTC to Bitfinex through plea-agreement provisions after ruling Bitfinex does not qualify as a 'victim' under the Mandatory Victims Restitution Act.

Bitfinex Hack Update 2025: $9 Billion in Bitcoin to be Returned — BeInCrypto

January 2026

Lichtenstein is released from federal prison to home confinement (January 2) after about 14 months, crediting the First Step Act.

Bitcoin Hacker Ilya Lichtenstein Thanks Trump for Early Prison Release - CNBC
Provenance & Audit Trail

Decision Log

  • #6review revise-15Recorded on Solana ✓10/27/2026, 7:24:17 PM
    slot 462187906 · hash FgHPctgGBUnGk7t6vjktApqbWcdEAtnAn53xEWRVsd2J
  • #5reviewRecorded on Solana ✓10/27/2026, 7:24:17 PM
    slot 462187901 · hash EHx2yN4Bd1XzKJz9QU7pQHqukxQ4ck8ffh3VaB7iMVMs
  • #4reviewRecorded on Solana ✓9/9/2026, 3:05:06 AM
    slot 445505725 · hash 9KRy7WBY9D1gLZE8NqmbycTBiiQRFqQ3P5aq1CnEbdtq
  • #3publishRecorded on Solana ✓5/30/2026, 1:03:56 PM
    slot 423161877 · hash 7MNDPzGZmZmbfLCWZ4K3862indHEb8yCPfpEJgUDeU8R
  • #2review approveRecorded on Solana ✓5/14/2026, 3:02:35 AM
    slot 419601692 · hash 3B4T5p5UKB2LCxJCCWX1cFZGuoXCzsohhy9LP15ybLYZ
  • #1reviewRecorded on Solana ✓5/14/2026, 3:02:35 AM
    slot 419601689 · hash AVxzpX8mavGu59F5oPmmJNBxVZsgShL1GuuPLXGGtZtE

This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 38 of 41 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-10-276 claims checked0 corrections pending0 applied⛓ anchoredSee findings →

model: claude-code-merge-writer

generated: 5/8/2026, 2:31:08 AM

last updated: 10/27/2026, 7:24:18 PM

5 views

avoid.net — verified advice for a post-truth world