Share this article

Millions in crypto funded tools to exploit U.S. software, Treasury says in new sanctions

An Australian national was said to sell cyber tools designed for the U.S. government and its allies to a Russian company known as Operation Zero.

Feb 24, 2026, 7:48 p.m. 2 min read
Treasury Department columns and statue (Jesse Hamilton/CoinDesk)

What to know:

  • The U.S. Department of the Treasury has sanctioned a Russian company and the individuals associated with it for dealing in stolen technology purchased with millions in cryptocurrency.
  • The technology was designed by a defense contractor for use by the U.S. government, and one of the contractor's employees was said to have stolen it and sold it to Operation Zero, the target of the new sanctions.

The U.S. Treasury Department has sanctioned a Russian company, Operation Zero, and the individuals behind it after accusing them of buying stolen cyber tools for millions in cryptocurrency and re-selling those technologies, which were created to be used by the U.S. government.

The tools bought and sold by newly sanctioned Sergey Sergeyevich Zelenyuk and his business, Operation Zero, were said to be originally stolen by an Australian national, Peter Williams, who once worked at the defense contractor that made the national-security focused software "for the exclusive use of the U.S. government and select allies." Williams pleaded guilty last year to selling trade secrets.

"Treasury will continue to work alongside the rest of the Trump Administration to protect sensitive American intellectual property and safeguard our national security," said Secretary of the Treasury Scott Bessent in a statement.

Zelenyuk and the others are said to be the first people to be sanctioned under the Protecting American Intellectual Property Act. The sanctions by the Office of Foreign Assets Control block U.S. people from any business dealings with those flagged or with others who do business with them."Operation Zero has sought to recruit hackers to support its activities and develop business relationships with foreign intelligence agencies through use of social media," the Treasury Department said in its statement. The accusations say the tools were offered for sale to those seeking to exploit vulnerabilities in computer software.

While the Treasury's Office of Foreign Asset Control alleged that cryptocurrencies were used in the transactions, it did not list specific addresses for blacklisting.

Read More: Criminal use of crypto spikes after years of steady decline, TRM report says


More For You

Jamie Dimon (John Lamparski/Getty Images)

JPMorgan CEO Jamie Dimon criticized Coinbase CEO Brian Armstrong and warned the current CLARITY Act framework could ultimately fail, as banks and crypto firms clash over whether stablecoin issuers should be allowed to offer yield-bearing rewards that resemble bank deposits.

What to know:

  • JPMorgan Chase CEO Jamie Dimon criticized Coinbase CEO Brian Armstrong and warned that the latest CLARITY Act draft could fail if lawmakers do not address banks’ concerns over stablecoin regulation on Friday.
  • Dimon argued that the bill would let stablecoin issuers effectively pay interest on deposits without bank-style protections, predicting...