Skip to main content

Unmasking the Crypto Colossus: Arkham Exposes a Staggering $14 Billion Bitcoin Heist

Arkham Intelligence, the leading on-chain analytics platform, has unearthed the crypto world’s most audacious heist to date: a staggering $14 billion Bitcoin theft. This dwarfs even the infamous $1.5 billion Bybit hack earlier this year.

The investigation reveals that the victim was LuBian, a once-prominent Chinese mining pool operating facilities in both China and Iran. In December 2020, a shocking 127,426 BTC – valued at $3.5 billion at the time – vanished from LuBian’s coffers. Today, that same Bitcoin haul commands a jaw-dropping $14 billion valuation.

A Stealthy Operation

Arkham’s analysis pinpoints December 28th, 2020, as the day of the initial breach. Over 90% of LuBian’s BTC reserves were pilfered. Further investigation shows additional thefts of approximately $6 million in BTC and USDT on December 29th from a LuBian address active on the Bitcoin Omni layer. By December 31st, LuBian had moved its remaining assets to recovery wallets.

Unlike the Bybit hack, which involved social engineering exploiting multisig cold wallets, LuBian’s security flaw appears to stem from a vulnerable private key generation algorithm susceptible to brute-force attacks. Adding insult to injury, Arkham discovered that LuBian attempted to recover their funds by sending pleading OP_RETURN messages to the hacker, spending 1.4 BTC across 1516 transactions in the process.

The Hacker’s Bounty

LuBian, despite its best efforts, retains only 11,886 BTC (approximately $1.35 billion). The remaining stolen Bitcoin, last consolidated in July 2024, makes the anonymous hacker the 13th largest Bitcoin holder globally, surpassing even the infamous Mt. Gox hacker.

The Significance

This massive heist highlights the persistent vulnerabilities within the cryptocurrency space, emphasizing the need for robust security measures and due diligence. The sheer scale of this theft underscores the critical importance of advanced security protocols, particularly for high-value operations like cryptocurrency mining.