Skip to main content
AVOID.NET

Bitfinex Hack 2016

avoid.net/bitfinex-hack-2016→21/100·95% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·5x24cm…U1Fd

Summary

On August 2, 2016, Bitfinex — a Hong Kong-based cryptocurrency exchange — was breached by hacker Ilya Lichtenstein, who exploited security failures in the exchange's multi-signature wallet architecture to steal 119,756 BTC (approximately $72 million at the time). Bitfinex controversially socialized the losses across all user accounts with a 36.067% haircut and issued BFX debt tokens, which were fully redeemed at par by April 2017. In February 2022, the U.S. Department of Justice arrested Lichtenstein and his wife Heather Morgan after seizing approximately 94,000 BTC worth $3.6 billion — the largest financial seizure in DOJ history at the time — and both subsequently pleaded guilty; Lichtenstein was sentenced to 5 years (released early in January 2026) and Morgan to 18 months.

Connected Entities

5 entities · 60 linked investigations
Organizations
Protocols
Tokens
Relationships
  • Bitfinex Hack 2016→mentioned with→Bitcoin(70%)
  • Bitfinex Hack→mentioned with→Bitcoin(60%)
  • Bitfinex Hack 2016→mentioned with→Bitfinex / Tether(80%)
  • UNUS SED LEO→mentioned with→Bitfinex / Tether(80%)
  • Bitfinex / Tether→mentioned with→Bitfinex Hack(80%)
  • Bitfinex Hack 2016→mentioned with→UNUS SED LEO(80%)
  • Bitfinex Hack 2016→mentioned with→Bitfinex Hack(80%)
  • UNUS SED LEO→mentioned with→Bitfinex Hack(80%)
  • Bitfinex / Tether→mentioned with→Bitcoin(60%)
  • Bitfinex Hack→mentioned with→Bitfinex / Tether(80%)
  • + 1 more
Have evidence about Bitfinex Hack 2016?

Timeline(10 events)

2 August 2016

Ilya Lichtenstein breaches Bitfinex's systems, executing approximately 2,000 unauthorized withdrawal transactions totaling 119,756 BTC (~$72 million) to a wallet under his control.

DOJ press release / CNBC

2 August 2016

Bitfinex halts all trading and withdrawals following discovery of the breach. Bitcoin price drops approximately 20%.

CoinDesk

7 August 2016

Bitfinex implements a 36.067% 'generalized haircut' across all customer balances, issuing BFX debt tokens at a 1:1 USD ratio to compensate affected and non-affected users alike.

Wikipedia / Coin Bureau

3 April 2017

Bitfinex completes full redemption of all outstanding BFX tokens at $1.00 par value, approximately eight months after issuance.

Bitfinex Blog

8 February 2022

The U.S. Department of Justice arrests Ilya Lichtenstein and Heather Morgan in New York City and seizes approximately 94,000 BTC valued at ~$3.6 billion — the largest financial seizure in DOJ history at that time.

DOJ press release

May 2023

OCCRP publishes investigation revealing that Bitfinex commissioned — and withheld — a confidential Ledger Labs security report identifying critical failures that enabled the 2016 hack.

OCCRP

3 August 2023

Ilya Lichtenstein and Heather Morgan plead guilty to money laundering conspiracy in Washington D.C. federal court. Lichtenstein admits for the first time to committing the original 2016 hack.

CNBC / DOJ

14 November 2024

Ilya Lichtenstein sentenced to 60 months (5 years) in federal prison. Heather Morgan sentenced to 18 months.

The Hacker News / Bank Info Security

2025

U.S. federal court orders in-kind restitution of approximately 94,000 BTC to Bitfinex via plea agreement provisions, after ruling Bitfinex does not qualify as a 'victim' under the Mandatory Victims Restitution Act.

BeInCrypto / Bitcoin.com News

2 January 2026

Ilya Lichtenstein released from federal prison after approximately 14 months, citing early release under the First Step Act. Placed on home confinement.

CoinDesk / TechCrunch
Provenance & Audit Trail

Decision Log

  • #3review revise-7Recorded on Solana ✓6/8/2026, 3:13:19 PM
    slot 425135608 · hash Fry8UEdtVo7CsWsimfcQiPGpB23qZcgNq1MPQiqLeNNu
  • #2reviewRecorded on Solana ✓6/8/2026, 3:13:19 PM
    slot 425135603 · hash 8rRVRdvcRcKY3kL2jBT8kCE4A1m9sW5o8i9qqDTfhqVb
  • #1publishRecorded on Solana ✓6/1/2026, 5:47:14 PM
    slot 423640143 · hash HACiE3UwwJfjo2UNLzpbwRrmdvzU22gLEL1Giu2o8ydp

This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 15 of 16 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 6/1/2026, 5:47:10 PM

last updated: 6/1/2026, 5:47:10 PM

3 views

avoid.net — verified advice for a post-truth world