Bitfinex Could Be Sole Victim in 2016 Hack, US Government Says

Highlights:

• The US government says Bitfinex could be the sole victim in the 2016 hack, per a recent court filing.
• Bitfinex compensated customers with BFX tokens, fully redeemed by April 2017, potentially limiting victims to the exchange itself.
• Authorities recovered most of the stolen Bitcoin, and the court may allow Bitfinex customers to submit claims before sentencing.

The U.S. government has indicated that cryptocurrency exchange Bitfinex may be the only entity eligible for restitution following the 2016 hack, which resulted in the theft of approximately 120,000 Bitcoin (BTC), now valued at around $7.4 billion. 

According to a recent court filing, authorities have not identified any additional victims under the Crime Victims’ Rights Act (CVRA) or the Mandatory Victims Restitution Act (MVRA). The court documents highlight that Bitfinex’s parent company, iFinex, has maintained that the exchange sustained financial losses.

🚨 BREAKING: U.S. Gov 🇺🇸 confirms #Bitfinex as the sole victim eligible for restitution from the 2016 hack!

No other individuals qualify for claims to the seized #Bitcoin, according to court documents. Bitfinex is officially the "Victim Virtual Currency Exchange."#crypto #btc pic.twitter.com/5h4oHGRbbl

— Cryptocurrency Inside (@Crypto_Inside_) October 9, 2024

The notorious hack in August 2016 marked one of the largest security breaches in cryptocurrency history. Attackers exploited vulnerabilities in Bitfinex’s systems, gaining unauthorized access to user accounts. The incident prompted a 20% drop in Bitcoin prices and raised concerns about the security measures of digital asset exchanges.

The Restitution Focus Shifts to Bitfinex

Following the breach, Bitfinex responded by issuing BFX tokens to affected users, allowing them to redeem, sell, or exchange the tokens for shares in iFinex. By April 2017, all BFX tokens had been fully redeemed, signaling the completion of the exchange’s compensation efforts. The government cited these actions as evidence that Bitfinex has already addressed customer losses. Consequently, it is unlikely that other victims would qualify for restitution.

In a filing by the U.S. Attorney for the District of Columbia, it was stated, “The government is not aware of any person who qualifies as a victim under the CVRA or for restitution under the MVRA, beyond perhaps Bitfinex.” The filing described Bitfinex as the “Victim Virtual Currency Exchange,” solidifying its position as the primary party impacted by the hack.

Although Bitfinex has taken steps to compensate users, the government is cautiously proceeding. It seeks court approval to notify potential claimants using alternative methods, such as posting information on the Department of Justice’s website. This move aims to allow former account holders to file claims before the sentencing hearings for Ilya Lichtenstein and Heather Morgan, the accused hackers.

Hack Recovery and Sentencing Developments

The 2016 hack saw Lichtenstein and Morgan, who later pleaded guilty to money laundering conspiracy, transfer over 119,754 BTC from Bitfinex. Their arrest in February 2022 led to the recovery of approximately 94,643 BTC, worth around $5.8 billion today. Further efforts in July 2023 yielded $312,219 in cash and 6.917 in Bitcoin Cash (BCH), adding to Bitfinex’s recovery.

Restitution efforts will likely prioritize redeeming Recovery Right Tokens (RRTs) issued post-hack. In addition, it will include up to 80% of any remaining assets potentially allocated to UNUS SED LEO token holders. Following the news, the LEO token’s value saw an uptick, reflecting market optimism regarding Bitfinex’s recovery progress.

Lichtenstein and Morgan are scheduled for sentencing in mid-November, and legal proceedings could expedite the process of returning seized assets. The U.S. government’s acknowledgment of Bitfinex as the primary victim could simplify restitution efforts and refocus the distribution of recovered funds.

The court’s declaration that Bitfinex could be the sole victim eligible for restitution represents a significant development in the long-standing legal case. For Bitfinex, securing the restitution it seeks may further bolster its position in the cryptocurrency market while addressing the financial repercussions from one of the industry’s largest breaches.