Live data from Hacker News

Feds arrest couple, seize $3.6B in hacked Bitcoin funds

washingtonpost.com

31–40 of 901 posts

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#31

Earlier quoted context omitted.

$4 billion has got to buy an awful lot of compute time, but still, how did they decrypt the file?

A fancy (or even basic) dictionary attack has a very high chance of working.

$4B should buy a very, very fancy dictionary.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#32
It seems that Tornado Cash (https://tornado.cash/) could have been used to launder the funds. I wonder if:

- Laundering happened before Tornado Cash existed, so Tornado Cash was not used

- They used something like Tornado Cash, but the funds were still traceable

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#33

In a hypothetical, if the two did not breach Bitfinex servers (unauthorized access to others systems) but instead managed to "guess" the private key to the Bitfinex wallet and transfer the funds, would this also be a crime? Would this be treated the same way?

From the article, they aren't necessarily being charged with the hack itself

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#34

Earlier quoted context omitted.

$4 billion has got to buy an awful lot of compute time, but still, how did they decrypt the file?

A fancy (or even basic) dictionary attack has a very high chance of working.

Random example but my passwords look something like chOf$Tyl83fhn@54R. I keep them written down because they are hard to remember. My threat model is no one. Seems so amateur to use a simple password that could be brute forced. Especially with so much on the line.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#35
post #14

I ask this every so often during threads regarding stolen cryptocurrency: Is there any solution yet to preventing stolen cryptocurrency funds from being spent? Isn't the only solution to have a central database and require laws to require every transaction to be pre-checked to see if it's stolen funds or not? And not only that, the centralized system will have to be constantly keeping track of wallet mixing to see wh…

Most cryptocurrencies are designed such that the concept of "returning" stolen funds is not really meaningful. The best analogue is cash. If you want to return the cash you need to physically find it and move it back.

Sovereign law isn't so easily waved away, unless you are seasteading.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#36

In a hypothetical, if the two did not breach Bitfinex servers (unauthorized access to others systems) but instead managed to "guess" the private key to the Bitfinex wallet and transfer the funds, would this also be a crime? Would this be treated the same way?

Wouldn't it still be laundering?

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#37

It seems that Tornado Cash ( https://tornado.cash/ ) could have been used to launder the funds. I wonder if: - Laundering happened before Tornado Cash existed, so Tornado Cash was not used - They used something like Tornado Cash, but the funds were still traceable

As other commenters have noted, they stored the public/private keys on a cloud drive. A coin mixer isn't going to save you from that.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#38
post #3

The statement of facts is linked to from the press release, and describes generally how the Feds were able to trace the stolen funds (they found a file listing private keys, after gaining access to the suspect's cloud storage) https://www.justice.gov/opa/press-release/file/1470186/downl... > The 2017 transfers notwithstanding, the majority of the stolen funds remained in Wallet 1CGA4s from August 2016 until January 3…

A little thin on details. I wonder if they tracked down IP addresses at the exchanges.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#39

It seems that Tornado Cash ( https://tornado.cash/ ) could have been used to launder the funds. I wonder if: - Laundering happened before Tornado Cash existed, so Tornado Cash was not used - They used something like Tornado Cash, but the funds were still traceable

Are you using Tornado Cash to launder money?

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#40
post #24

In a hypothetical, if the two did not breach Bitfinex servers (unauthorized access to others systems) but instead managed to "guess" the private key to the Bitfinex wallet and transfer the funds, would this also be a crime? Would this be treated the same way?

If a bank accidentally leaves a sack of cash on the sidewalk and you take it, it is not yours. Plus they didn't declare any of the money and instead laundered it through a bunch of sham companies and fraudulent users on crypto exchanges.

Even if the bank accidentally put the money in your bank account and it’s reasonable to believe that it’s not yours, you can be held liable if you spend it or withhold it from the bank.
Post reply on HN