BREAKING: ARKHAM UNCOVERS $3.5B HEIST - THE LARGEST EVER
LuBian was a Chinese mining pool with facilities in China & Iran. Based on analysis of on-chain data, it appears that 127,426 BTC was stolen from LuBian in December 2020, worth $3.5 billion at the time and now worth approximately $14.5 billion.
Neither LuBian nor the hacker have publicly acknowledged the hack. Arkham is the first to report it. Details below:
LuBian was one of the world’s largest mining pools in 2020, controlling almost 6% of the Bitcoin network’s total hash-rate as of May 2020.
They appear to have been first hacked on December 28th, 2020 for over 90% of their BTC. Subsequently, on December 29th, around $6M of additional BTC & USDT was stolen from a Lubian address active on Bitcoin Omni layer.
On the 31st, LuBian rotated their remaining funds to recovery wallets.
Each hacker address received the OP_RETURN message, shown in the screenshots, in which LuBian asks the hacker to return their funds.
LuBian spent 1.4 BTC across 1516 different transactions to send these messages, which suggests that this is not a spoof from another hacker who has brute-forced the private keys.
DID THE US GOVERNMENT JUST SELL 170,000 BTC ($20 BILLION)?
No. This Freedom of Information Request response from the US Marshals Service (USMS) cites them as holding 28,988 BTC ($3.4B), but other departments of the US Government also seize and hold Bitcoin, including the FBI, DOJ, DEA, and US Attorney’s Offices.
The US Government currently holds at least 198,000 BTC ($23.5B) across multiple addresses held by different government arms - none of this has moved for 4 months.
$13.65B of US Government BTC was seized from the Bitfinex Hackers.
Of the USG’s current holdings, 94,000 BTC were seized from Ilya Lichtenstein and Heather ‘Razzlekhan’ Morgan in 2022, 6 years after they were stolen. Subsequent seizures brought this total up to 114,599 BTC (currently $13.65B) from the case.
The Bitcoin was originally stolen from Bitfinex customers, and may eventually be returned through legal process.
Most of the BTC is held in this address: bc1qazcm763858nkj2dj986etajv6wquslv8uxwczt
$8.26B of US Government BTC was seized from ‘Individual X’ in the Silk Road case (understood to be someone who had hacked Silk Road) in 2020.
The BTC is held in this address: bc1qa5wkgaew2dkv56kfvj49j0av5nml45x9ek9hz6
SAYLOR SAID HE WOULD NEVER REVEAL HIS ADDRESSES ... SO WE DID
We have identified an additional 70,816 BTC belonging to Strategy, bringing our total identified MSTR BTC holdings to $54.5 Billion. We are the first to publicly identify these holdings.
This represents 87.5% of total MSTR holdings (including assets in Fidelity Digital’s omnibus custody).
Previously, we tagged:
- 107K BTC sent to MSTR Fidelity deposits (Fidelity does not segregate custody, so these BTC do not appear in the MSTR entity)
- Over 327K BTC held in segregated custody including Coinbase Prime, in our MSTR entity.
CHINESE MAN BURNS $1.3M ETH CLAIMING ATTACK BY BRAIN-COMPUTER WEAPONS
This morning, an address sent $1.3M of ETH to the burn address, accusing some Chinese investors of using “brain-computer weapons”. It is now completely unrecoverable.
He enclosed a message in Chinese: “The CEOs of Kuande Investment: Feng Xin and Xu Yuzhi used brain-computer weapons to persecute all company employees and former employees, and even they themselves were controlled.”
The address appears to be controlled by “Hu Lezhi” who claims to be an “ordinary programmer and entrepreneur”
In total the address has sent $4.95M to the burn address, Wikileaks, and the Ethereum Foundation this week.
It has also transferred $825K ETH to a Coinbase Deposit and $273K ETH to a fresh address 0x2a6.
Last night the President of Argentina, @JMilei posted a contract address of a Solana memecoin “LIBRA”
LIBRA hit a max valuation of over $4 BILLION before falling over 95% in less than 6 hours, and the tweet was later deleted.
Breakdown below:
70% of the supply is held in 2 addresses, while 15% of supply was directly deposited into Meteora LP by the Developer address.
The developer address has claimed over $20M in trading fees from these deposits.
Additionally, 7 different addresses received a total of 60M LIBRA tokens from the deployer - each of these addresses deposited LIBRA into liquidity pools and later extracted SOL/USDC.
Addresses connected to the LIBRA coin launch currently hold over $100M of USDC and SOL extracted from liquidity over the past 18 hours, mostly moved to separate holding addresses.
LIBRA-associated accounts currently hold $57.6M USDC and $48.6M SOL.
Ross Ulbricht, or someone with access to his wallets, just accidentally nuked the price of a pumpfun coin sent to him while trying to provide liquidity on Raydium.
Because he initialized the liquidity pool at the wrong price, $1.5M of the token (5% supply) was instantly taken by a MEV Bot, then sold into the existing pool.
Then he did it again and he lost another $10.5M. (35% supply)
Ross Ulbricht’s Solana donation address received 50% of the supply of ROSS (Ross Ulbricht Fund) from the developer last week.
Ross tried to add single-sided liquidity to sell the coins off passively, but accidentally created a pool with Raydium CPMM (Constant-Product Market Maker) instead of CLMM (Concentrated Liquidity Market Maker).
The MEV Bot that took the coins managed to sell them off for over $600K, sending the price down -90% in the process.
Despite losing 40% of the supply, Ross still holds 10% of the token in a separate address, with LP correctly added on Raydium Concentrated Liquidity. (currently worth ~$200K)