Live data from Hacker News

Feds arrest couple, seize $3.6B in hacked Bitcoin funds

washingtonpost.com

171–180 of 901 posts

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#171
post #74

Earlier quoted context omitted.

I was wondering about this. I would think the most obvious path would be to find some other criminals (now you've got new risks) who don't care about the provenance of the coins, will pay cash for some coins at a discount, and you somehow launder that cash.... Could at least get a couple bucks from it, possibly.

Or weaponize the coins. Take 10 BTC and give them to 100 groups/people you don't like. Investigators make their lives miserable for a while. For normal people, that'd be ridiculously expensive but since they didn't pay for the coins and have 100k+ more they can't use, it's "free."

haha right! I would have bridged them to the Ethereum network and sent it to everyone with an ENS registered

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#172

Earlier quoted context omitted.

There's a lot of evidence in the statement_of_facts however it's unclear how much of it can only be reconstructed with the private keys. Interested parties should really look to what was known to grant the search warrant. https://www.justice.gov/opa/press-release/file/1470186/downl...

They don't usually give details of how they caught them, because the next bad-actor will read that to know their tactics. Search warrants are given on reasonable doubt . When it comes to cryptocurrencies, the feds have reasonable doubt on everyone. So it is always possible for them to get a search warrant. I emphasized private keys, bec without them, no matter how much doubt the feds had, they couldn't prove anything…

> reasonable doubt

I think you mean reasonable suspicion & probable cause.

Reasonable doubt is the threshold prosecutors must appear to exceed for a successful finding of guilt with a jury (elimination of reasonable doubt).

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#173
post #99
post #85

Earlier quoted context omitted.

I'm not invested in crypto or really at all interested in it. That said, my mentor seems pretty excited about it and is pretty heavily invested as of the past few months. I advised him to do something like https://en.wikipedia.org/wiki/Shamir's_Secret_Sharing and distribute it across a wide number of storage mechanisms, physical, digital, and custodial. For instance, in google drive, in drop box, in a bank safety dep…

I don't understand the math but I think I have seen that style of secret management where any 3 of say 10 secrets can access something but no 2 or any 1 secret can do it. It would seem to solve a lot of just organizational problems where "jan is out of the office today" and nobody can do the thing ... but if access is spread out among 10 people ... 3 probably are in the office when needed. Granted I've never seen it…

I have used it. It works. Tooling is still pretty poor. Every use, we ended up bringing the necessary people into a room, booting up an offline laptop from a sha-summed live USB, QR code scanning each of our secrets, combining them, then using the key to sign whatever we needed to sign, photographing the signature as a QR code. We use software from 2008 because an OS stack contains code from tens of thousands of developers, and we felt old software was less likely to have an active 'steal these keys and exfiltrate them via open wifi' malware.

We would first go through the process with 'dummy' keys to check everyone was happy with the process and what we were going to do (ie. which commands, what software, what exactly will be signed). We would then do it again with the real thing. And then we'd power off the computer till next time it needed to be used.

"Clunky" would be a good way to describe it... But it's hard to make it better without relying on a bunch of software we don't have the resources to audit.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#174
post #152

> “After the execution of court-authorized search warrants of online accounts controlled by Lichtenstein and Morgan, special agents obtained access to files within an online account controlled by Lichtenstein,” the press release said. “Those files contained the private keys required to access the digital wallet that directly received the funds stolen from Bitfinex, and allowed special agents to lawfully seize and rec…

This would have happened: https://xkcd.com/538/

lol using a mixer means that the feds don't know which account contains the bad funds. So they don't find the identity of the perp. So no possibility of beating the perp.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#175
post #82

It never ceases to amaze me how incompetent some high profile criminals are. Encrypting a file is simply too difficult apparently. The entire purpose of crypto is that the exclusive holder of a private key cannot have funds seized. A 15 year old kid probably has better opsec with their crypto wallets than these people. Astonishing really.

yeah I've never seen a crypto investigation that made me impressed with the government's abilities, nothing that surprised me about the utility of OPSEC best practices, only people with weak links and dumb behaviors that are incompatible with doing something criminal.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#177

Earlier quoted context omitted.

> Not to mention, this threat could have been easily mitigated by keeping your funds in a multsig wallet, with the keys distributed in multiple redundant locations. And if you're released from prison and recover your Bitcoin, you will be arrested again for contempt of court or a similar charge.

Why anyone would use BTC and not some privacy coin for this kind of scenario escapes me.

Is it practical to convert literal billions of dollars between currencies? And even if you did, wouldn't liquidating it so you can actually spend it on things in the real world prove to be almost impossible? Billions of dollars worth of currency is more than I'd expect most privacy coins to deal with over the course of months.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#178

fwiw, it appears one of the named here is a YC Alum: https://news.ycombinator.com/user?id=il https://www.linkedin.com/in/unrealdutch/

This is just unreal. this guy was living a double life of being the greatest criminal ever. So among our community was a $4 billion hacker, just nonchalantly posting.

I don't think he will be commenting anytime soon again if this really is him

https://news.ycombinator.com/threads?id=il

like your neighbor being a serial killer or something

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#179
post #149
post #90

Earlier quoted context omitted.

>Seems so amateur to use a simple password that could be brute forced. Especially with so much on the line. There's selection bias going on because only dumb criminals get caught, so you only hear about the dumb opsec practices of those criminals. Conversely, you'll never hear about the opsec practices of that professional crew with perfect opsec that hacked an exchange/difi contract and disappeared into thin air.

Until the least bright member of the crew makes a mistake, gets caught, and turns in the rest. Being perfect is difficult to maintain forever, though it's possible in principle. It might require the thief to live like a grad student even though he has billions of dollars/euros worth of stolen wealth; being flashy attracts attention and if nothing else, the tax authorities.

If a person is that financially rich but still has to live like a grad student, it seems like the only point of that wealth is to rebel against the legal system. Even if one isn't caught, there's still a loss of freedom to avoid getting caught.

I haven't studied criminology, but I alternatively suppose someone who does that just doesn't think that far ahead. This likely also explains why the vast majority of people with these capabilities choose to live a life in accordance to their country's laws.

Re: Feds arrest couple, seize $3.6B in hacked Bitcoin funds

#180

Shouldn't all true crypto believers hate this news? It's the government trying to enforce their opinion of who should own those Bitcoins, thereby taking power away from the owner that the network has decided on, which would be "whoever has the cryptographic keys".

Technically they were charged with conspiring to launder money, completely unrelated to any mention of theft or hacking.

From TFA: "Court papers filed against the couple did not accuse them of the hack itself; officials declined to say if the pair are suspected of stealing the money."

Post reply on HN