Briefly
- Chinese language state cybersecurity watchdog CVERC has alleged that the U.S. unlawfully seized 127,271 BTC from a mining pool hack as an alternative of felony proceeds.
- The Bitcoin stash in query was allegedly tied to Chen Zhi, a Cambodian businessman accused of operating “pig-butchering” scams.
- The cash stayed dormant for 4 years earlier than being moved to wallets tagged as U.S.-controlled.
A Chinese language state cybersecurity watchdog has accused the U.S. authorities of unlawfully seizing billions of {dollars} price of Bitcoin, alleging the property originated from a 2020 mining pool hack as an alternative of being sourced from felony proceeds tied to Cambodian businessman Chen Zhi.
A technical report issued Sunday by the China Nationwide Laptop Virus Emergency Response Middle (CVERC), a nationwide cybersecurity company, challenges the U.S. Division of Justice’s account of the seizure.
CVERC claims LuBian, a mining pool, was hacked on December 29, 2020, dropping 127,272.06 BTC—then price about $3.5 billion, and since having risen in worth to $13.2 billion—allegedly held by Chen Zhi’s Prince Group.
Chen, who chairs the group, is accused by U.S. prosecutors of operating a large-scale “pig-butchering” rip-off operation involving pressured labor and crypto fraud.
After the theft, Chen’s group reportedly despatched blockchain messages in 2021 and 2022 providing a ransom for the return of the funds, which stayed untouched for 4 years earlier than being moved in mid-2024.
In its report, CVERC additional alleged that the U.S. authorities “might have already stolen the 127,000 bitcoins held by Chen Zhi via hacking strategies again in 2020, making [the seizure] a typical ‘black-eats-black’ operation orchestrated by a state-level hacking group,” the evaluation reads, as machine-translated from Mandarin.
CVERC argues the addresses listed within the DOJ’s indictment of Chen Zhi correspond to these from the 2020 LuBian breach, citing analyses from Elliptic and Arkham Intelligence to assist its declare that the seized funds originated from compromised mining operations in China and Iran.
Every week after the DOJ’s October 14 announcement, some $2 billion price of Bitcoin have been moved to new wallets.
The allegations of theft have been first reported by the International Instances, an English-language tabloid run by the Folks’s Every day, the official state newspaper of the Chinese language Communist Occasion.
Decrypt has reached out to CVERC, the U.S. Treasury, and the U.S. DOJ for remark. Separate affirmation requests have been despatched to Elliptic and Arkham Intelligence.
Insider theft?
TRM Labs, a blockchain intelligence agency, confirmed with Decrypt that the seized Bitcoin “originated from 25 unhosted wallets managed by Chen as of 2020,” in response to their analysis.
“Whereas we don’t know for positive how or why they have been moved from Chen’s wallets, the DOJ forfeiture criticism hints at one concept of what occurred, no less than from the angle of the Prince Group: an insider stole the cash,” Angela Ang, head of coverage and strategic partnerships for Asia Pacific at TRM Labs, instructed Decrypt.
Ang added that on-chain exercise signifies the following main motion of those funds have been between June and July 2024.
The funds are actually in U.S. authorities custody, Ang famous, suggesting that “the 2024 transactions possible characterize the switch of these property into their possession.”
Requested whether or not their findings included documentation on how U.S. authorities gained entry to or management of the wallets recognized in its report, Ang acknowledged limitations.
“Proper now we don’t have exhausting solutions as to how the funds got here to be in U.S. authorities custody, however it’s plausibly linked to the sooner chain of actions,” Ang mentioned.
Every day Debrief E-newsletter
Begin day by day with the highest information tales proper now, plus unique options, a podcast, movies and extra.

