Share this article
China Accuses U.S. of Stealing 127K BTC in High-Profile Crypto Hack
CVERC claims the hack was conducted by a "state-level hacking organization" and suggests the U.S. seizure was part of a larger operation involving the same attackers.
Updated Nov 11, 2025, 2:06 p.m. Published Nov 11, 2025, 9:38 a.m.
What to know:
- China's National Computer Virus Emergency Response Center (CVERC) accused the U.S. government of seizing 127,000 stolen bitcoin (worth $13 billion) that were originally hacked in 2020 from a Chinese mining pool.
- CVERC claimed the hack was conducted by a "state-level hacking organization" and suggested the U.S. seizure was part of a larger operation involving the same attackers.
- The U.S. government disputed CVERC's claims, maintaining that the seizure was a legitimate law enforcement action targeting criminal proceeds, while China sees it as a provocative act escalating tensions between the two nations.
A Chinese cybersecurity watchdog is accusing the U.S. government of taking part in a major cryptocurrency heist, escalating tensions around a years-long mystery involving 127,000 stolen bitcoin, now worth roughly $13 billion.
China’s National Computer Virus Emergency Response Center (CVERC) released a technical report Sunday claiming the U.S. Department of Justice seized BTC that was originally stolen in a 2020 hack targeting the LuBian mining pool.
STORY CONTINUES BELOW
At the time, the hacked coins were tied to Chen Zhi, chairman of Cambodia’s Prince Group, who is now under U.S. indictment for allegedly running a large-scale crypto fraud scheme.
The report lays out a timeline suggesting the hack was conducted with advanced tools, suggesting the work of a “state-level hacking organization.” That’s according to the Global Times, a Chinese state-owned newspaper affiliated with the Communist Party of China’s official newspaper, the People’s Daily.
For nearly four years, the stolen bitcoin remained untouched, and the hack largely remained unnoticed.
Then, in mid-2024, the stash was quietly transferred to new wallets. Blockchain analysis firm Arkham later tagged those wallets as belonging to the U.S. government.
CVERC’s analysis challenges the U.S. narrative that the funds were criminal proceeds. Instead, the agency claims the seizure may have been the final step in a long operation involving the same attackers behind the original theft.
The U.S. maintains the seizure was a legitimate law enforcement action.
CoinDesk has reached out to the U.S. Treasury and Department of Justice for comment but hadn't heard back by press time.
AI Disclaimer: Parts of this article were generated with the assistance from AI tools and reviewed by our editorial team to ensure accuracy and adherence to our standards. For more information, see CoinDesk's full AI Policy.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Small Texas Lender Monet Joining Field of Crypto-Focused Banks
The bank is owned by billionaire Andy Beal, a major supporter of U.S. President Donald Trump's 2016 campaign.
Top Stories
