Share this article

Bitcoin Wallet of the Failed BTC-e Exchange Wakes Up

Someone transferred 10,000 BTC from a previously sleeping wallet identified as holding the treasury of the failed BTC-e exchange.

Updated Apr 9, 2024, 11:25 p.m. Published Nov 23, 2022, 4:49 p.m.
(Midjourney/CoinDesk)
(Midjourney/CoinDesk)

A crypto wallet attributed to the BTC-e exchange that's been linked to the 2014 Mt. Gox hack burst into life Wednesday with its largest transaction since August 2017, sending a total of 10,000 bitcoin ($165 million) to two unidentified recipients.

As part of the transaction, which took place around 08:38 UTC, a wallet that received 3,500 bitcoin forwarded 300 BTC to another destination. That was split further and landed in several wallets not attributed to any known custodial service. The distribution pattern is open to interpretation: It's possible the wallet owner simply sent the money to other wallets of their own, sent it to other people or cashed out through an unofficial over-the-counter broker. The remaining 6,500 stayed put.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the The Protocol Newsletter today. See all newsletters

Mt. Gox, the first bitcoin exchange, was robbed of 744,408 BTC and shut permanently in 2014. Alexander Vinnik, alleged to be the operator of BTC-e – which he denies – was arrested in 2017 at a resort near Thessaloniki, Greece, at the request of the U.S. Department of Justice on money laundering and other allegations.

The wallet involved in Wednesday's transaction was attributed to BTC-e by blockchain analytics system Crystal Blockchain. The transfer was noticed by Russian crypto entrepreneur Sergey Mendeleev, who published the observation in his Telegram channel. Blockchain data provides a limited amount of information, which is open to interpretation.

Vinnik, a Russian national, faced competing extradition claims from Russia, France and the U.S. He was extradited to France from Greece in 2020 and sentenced to five years in prison for money laundering. In August of that year he was extradited to the U.S. to face allegations of “computer intrusions and hacking incidents, ransomware scams, identity theft schemes, corrupt public officials and narcotics distribution rings,” according to a 2020 indictment by the California court. He is now at the Santa Rita Jail in Dublin, California, according to the court case docket.

Russian Link

Soon after BTC-e closed and its servers seized by the FBI in 2017, a clone started under the name WEX. After a year of operation, WEX froze all withdrawals and shut down. CEO Dmitri Vasilev said he sold the exchange to Dmitri Khavchenko.

Before and after shutting down, WEX wallets were drained of millions of dollars worth of crypto, CoinDesk reported at the time. Users filed police reports and several investigations were reportedly launched in Russia and Kazakhstan. Over the years, Vasilev has been arrested in Italy, Poland and Croatia at the request of the Russian police, but every time released soon after.

The most recent picture in Vasilev's Instagram profile was posted on May 3, geotagged as taken in Amsterdam. On the photo, Vasilev is standing in front of a store named Scamm.

In his public talks, as well as in group chats with WEX users, Vasilev said control of users' crypto had always been with the anonymous WEX admin. In 2019, another Russian national, Alexei Bilyuchenko, confessed to being the admin. He said he was forced to transfer all the money to two unidentified officers of Russia's Federal Security Service (FSB), according to the criminal case materials obtained by BBC.

According to a group of WEX users, Bilyuchenko is currently in a Russian prison called Matrosskaya Tishina in Moscow, because a letter sent to him through the official prison mail system was reported as received.




More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Solana’s Drift Launches v3, With 10x Faster Trades

Drift (b52_Tresa/Pixabay)

With v3, the team says that about 85% of market orders will fill in under half a second, and liquidity will deepen enough to bring slippage on larger trades down to around 0.02%.

What to know:

  • Drift, one of the largest perpetuals trading platforms on Solana, has launched Drift v3, a major upgrade meant to make on-chain trading feel as fast and smooth as using a centralized exchange.
  • The new version will deliver 10-times faster trade execution thanks to a rebuilt backend, marking the largest performance jump the project has made so far.