Share this article

Someone Just Moved $3.55B Worth of Bitcoin From 2016 Bitfinex Hack

Bad actors would have a tough time cashing out the stolen bitcoin as most of them are blacklisted.

Updated May 11, 2023, 5:26 p.m. Published Feb 1, 2022, 7:55 a.m.
Source code from the master branch of open-source Bitcoin Core code repository on GitHub. (GitHub, modified by CoinDesk)
Source code from the master branch of open-source Bitcoin Core code repository on GitHub. (GitHub, modified by CoinDesk)

Editor’s note (Feb. 9, 19:10 UTC): The original version of this article was written under the assumption that hackers were responsible for moving the coins. A week after publication, the U.S. Department of Justice announced it had seized $3.6 billion worth of bitcoin linked to the 2016 Bitfinex hack, and that law enforcement had gained access to the wallet on Jan. 31, the day before the exact amount of BTC (94,643.29) was observed moving on-chain. The article has been updated throughout to reflect the difficulty of attribution when analyzing on-chain activity.


Large amounts of bitcoin stolen from the cryptocurrency exchange Bitfinex six years ago were moved by unidentified parties early on Tuesday.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
  • "So far this morning, 94,643.29 bitcoins ($3.55 billion) have been moved in 23 transactions, from a wallet associated with a theft from Bitfinex in 2016, to a new address," blockchain analytics firm Elliptic said. These originate from a theft suffered by Bitfinex in 2016, the firm added.
  • "It is unlikely that these funds will be cashed out any time soon. Funds from this hack have been slowly laundered for over five years now and cashing-out large volumes over a short period of time would draw unwanted attention," Elliptic said.
  • The number of bitcoin transferred amounted to 79% of the total 119,756 bitcoins drained from Bitfinex in 2016, one of the biggest bitcoin hacks to date.
  • Twitter account WhaleAlert had earlier reported on this development, saying that someone transferred 10,000 bitcoins worth more than $383 million to an unknown wallet during Asian hours on Tuesday.
  • Unidentified parties last moved the stolen bitcoin in April 2021, transferring over $700 million worth of coins to unknown wallets during the bull frenzy brought on by crypto exchange Coinbase's then impending listing on Nasdaq. According to Elliptic, the funds were laundered through darknet markets like Hydra and privacy-focused Wasabi wallet.
  • Igor Data, CEO of Geneva-based BLIN Analytics, said Hydra and Wasabi might be used again.
  • "Hydra breaks the link between the incident and further transactions, and Wasabi Wallet provides the necessary level of anonymization, including the ability to hide the connection not only to Bitfinex Hack but also to Hydra," Data said in a LinkedIn chat. "The hackers obviously use the automation tools to reduce the chance of error, which could lead to the hackers being caught."
  • A movement of malicious funds usually raises suspicion of bad actors looking to cash out and spooks markets.
  • As noted in April, most of the bitcoin associated with the Bitfinex hack is widely tracked and blacklisted. Thus, bad actors would have a tough time cashing out on prominent centralized exchanges.
  • In other words, the latest movement of the hacked coins presents little downside risk to bitcoin. At press time, the cryptocurrency was trading largely unchanged on the day near $38,500.

Read more: $623M in Bitcoin From 2016 Bitfinex Hack Moved Under Cover of COIN Hype

UPDATE (Feb. 1, 10:39 UTC): Updates the figure in the headline and the text, adds comment from Elliptic.

UPDATE (Feb. 1, 11:17 UTC): Updates fourth bullet to say Whale Alert earlier reported on the transfers.

Update (Feb. 1, 11:57 UTC): Adds comments from BLIN Analytics.




More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Coinbase Sees Crypto Recovery Ahead as Liquidity Improves and Fed Rate Cut Odds Climb

Coinbase

The crypto exchange also took note of a so-called AI bubble that continues to go strong and a weaker U.S. dollar.

What to know:

  • Coinbase Institutional is seeing a potential December recovery in crypto, citing improving liquidity and a shift in macroeconomic conditions that could favor risk assets like bitcoin.
  • The firm's optimism is driven by rising odds of Federal Reserve rate cuts, with markets pricing in a 93% chance easing next week, and improving liquidity conditions.
  • Several recent institutional developments, including Vanguard's crypto ETF policy reversal and Bank of America's greenlighting of crypto allocations, have contributed to bitcoin's rebound from recent lows.