Topic: stolen BTC from electrum in 2018 accumulated in this adress (Read 205 times)

The address belongs to Bitfinex and has been confirmed by many reputed members of the forum. I also check the address and found many transactions were happening few seconds ago. If it was an address that belonged to hackers group then the address should already be dead until they decided to move the funds from it. But, the scenario is different with this address there funds are constantly moving without any fear from governments and other authorities and that clearly shows that the address is transparent and has no fear from any authorities.

I would recommend you to do your research thoroughly before coming up with a conclusion, and even if the hackers used that hot wallet for moving the funds then still it's not the fault of the exchange because they weren't speculating each transaction done by the users, and they never freeze the withdrawals. By the way, hackers can use fake KYC data and that's why it doesn't make much sense to go behind the one whose KYC information was given during account creation. Those hackers might be so smart to person such malicious action and if they really moved the funds to the wallet then they did that intentionally.

its not "some hacker" nor "some whale"

its one of bitfinex's hotwallet addresses it uses to perform withdrawals for many users

in short many many many taints ago the hacker moved hacked coins around and it ended up in bitfinex.. either directly from the hacker depositing into bitfinex or the hacker moving funds between users using other services during the 5 years, and its then random innocent recipient users of that taint that then used bitfinex.. either way, that taint is now sat in a bitfinex hotwallet.

it might be worth the victim(s) that has taint now moved to that address to contact bitfinex. show bitfinex their address they lost funds off of from years ago to show the taint path to bitfinex.
probably worth signing a message with that old key to prove you did have control of funds pre-theft

 and then have bitfinex do an investigation on the history of the utxo spends backwards from todays claim back to victims claim.  to see which user deposited those funds in the middle.

then if other victims of same scam come forward and bitfinex sees a pattern of the same user depositing same funds into bitfinex then bitfinex can report that user..

bitfinex obviously wont just 'out' the depositor publicly, because it might be just be some random guy that accidentality received some tainted coins between 2018-2023

however if alot of victims funds result in going to the same user. then thats less of a random act/random coincidence. to which they can report such a user

edit:
quick search
it seems alot of the electrum phish scam of 2018 has been moving through bitfinex several times and ended up in bitfinexes hotwallet address
even as early as 2019 https://twitter.com/JohnCon54897907/status/1111279898260312066
and it seems again this month.

so it seems too coincidental to be just a random fluke. so bitfinex could do some investigating into this

If we do tend to look back about this certain situation

Phishing Attack on Electrum Wallet Nets Hacker Almost $1 Million in Hours: Report
Based up on the link or article which it do mentions only 250 BTC on that time. I dont know if there are more people get phished after that
before the news spread out like wildfire and halt out Electrum users on stopping that update pop out.

Checking out the address, it do shows on this one;
https://www.blockchain.com/explorer/addresses/btc/1MkM9Q6xo5AHZkLv2sTGLYb3zVreE6wBkj

So the address on OP given might really be not the hacker or just been said its owned by some whale.

In 2018, a significant amount of Bitcoin (BTC) was stolen from the Electrum wallet and accumulated in a specific address. This unfortunate incident raised concerns within the cryptocurrency community, highlighting the importance of secure storage practices. While the exact details and extent of the theft may vary, it serves as a reminder for individuals and businesses to remain vigilant and employ robust security measures to safeguard their digital assets. The incident prompted heightened awareness and efforts to enhance wallet security, emphasizing the ongoing need for advancements in the crypto space to prevent such occurrences in the future.

While I am checking the address holds 995.2 BTC so there is lot of activities going on there so I don't think it belongs to hacker, but hacker probably used if its some kind 9f crypto related service so OP misjudged that this address belongs to hacker.

And as others said if he is smart enough to hack that much amount of money then I don't think he will be dumb enough to use KYCed exchange which will expose his real identity.

An update, as of writing, this holds 3K+ BTC now.

Upon checking who the BTC address is, I think it's good to know this. I'm just not sure how fraudulent but of course, any public address can be checked and determined.
https://www.bitcoinwhoswho.com/address/1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g

I don't know how it's 1969 with the first transaction or something.

Like omega said, very possible the address does not belong to any hacker, but let's assume the address actually belongs to the hacker refered to, well, it is actually possible that he could be arrested if he decides to move the bitcoin to an exchange possibly to sell, but another thing to consider is, what if he decides to use a mixer?
I don't think any exchange would be able to detect the stolen bitcoins so as to link it to any account..
If it's actually possible for the hacker to still be detected even if he uses a mixer, then I stand to be corrected.

(one of) the Electrum hackers have already been arrested. https://www.bleepingcomputer.com/news/security/police-arrest-man-for-laundering-tens-of-millions-in-stolen-crypto/

Well, wouldn't it be a hoot if the crypto-crook just strolled into an exchange and got nabbed during a fiat conversion? Dream on, mate!

Sure, the Bitfinex hackers got caught, but it's a bit like finding a needle in a haystack. We're talking about an arena where anonymous digital currency meets the murkiness of the Internet - it's a cyberpunk detective story.

Could the hacker get caught? Maybe, but only if they were as clumsy as a bull in a china shop. Given the hefty sum they've accumulated, I'd reckon they've got the wits to keep their tracks well covered. Mixers, tumblers, privacy coins... There's a whole smorgasbord of tools for a cyber-bandit on the lam.

Recovering bitcoins is a double-edged sword if the entity holding those stolen coins happens to be a government. Because separately, they can easily demand that users turn over their coins at anytime, for whatever reason they feel like, which I call "anti-recovery". So yeah. It's not like there is some altruist organization that can seize funds from hackers AND returns them back to confirmed users.

I think all such arrests won't end up with neither assets seizure nor imprisonment, since legal status of cryptocurrencies is still unclear in most countries. And, even if crypto assets are to be seized, there is anyway little to no chance to get it back, since such transactions are impossible to be legally tracked (even if money path is obvious, it may turn out that this path is legally unproven, same things happen with fiats as well).

Also when these stolen fund reaches the exchange, there is no way one can further trace them. As the hacker may exchange them with any altcoins or multiple altcoins and then withdraw those altcoins from the exchanges. So now there is no point monitoring that address, even if belongs to the hacker (in this case of course its an bitfinex address and not the hacker's address)

At the time of writing this address contains 2801 BTC and there are many transactions happening every few miuntes also proof that this is not a hacker's address.

No. You are wrong. That's bitfinex hot wallet address.
If someone hacks your wallet, steals your bitcoin and then send the fund to Bitfinex, binance or any other exchange, does it mean your bitcoin has been stolen by the exchange?

If your fund has been stolen and it has been moved to that address, it means that the fund has been deposited to bitfinex. That's all.

It wasn't worth that much at the time but I think the amount was around that yes.

But according to this article[1]. There was a suspect who got arrested and his funds seized (they didn't mention how much).

I couldn't find any updates about the case but the article also mentions the hacker used BISQ and Monero so I don't see someone who's that careful using a CEX like Bitfinex.

[1] https://thenationview.com/cryptocurrency/97819.html

if electrum site get hacked i dont think GPG signature will help since the hacker will change both
the electrum wallet file and the signature file to something looks like the devs signature since you will
download both fake singature and fake file from hacked electrum site

andjust like mentioned here
https://github.com/spesmilo/electrum/issues/4953


note the text "Sources and executables are signed by ThomasV. GPG Key ID : 0x6185FDBFC15DDD19"
but the real key for ThomasV is 6694D8DE7BE8EE5631BED9502BD5824B7F9470E6

that mean when you scan the fake electrum file you still think its the real version
especially for new users who download both fake signature and fake electrum from the hacked electrum site

yes im sure its the hacker adress since i found it when i was tracking the reported electrum stolen btc from someone transaction from 2018
the hackers send the stolen btc to multiple defferent adresses then he did the same from those adresses multiple times
and ended up on this adress

i dont think it get arrested how did u knew that if it was arrested then why +2500 hacked BTC still moving

According to wallet explorer, this address has alone 400000 transactions and it is part of a wallet with more than 2 million transactions

https://www.walletexplorer.com/wallet/00000ce9ca742500?from_address=1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g


This address holds 2600 btc. Could the hacker get more than 2k btc in this phising attack? It is way more than I expected

its the hacker adress because someone who get his btc stolen from electrum in 2018
posted his wallet and the transaction ID in reddit at that time when i tracked the transactions i ended up to this one
 if what are u saying is true then that whale is the hacker

That phishing attack was bad and forum admin announced about it to warn the community.
Electrum vulnerability allows arbitrary messages, phishing

They was phished because they did not verify GPG signatures.
[GUIDE] How to Safely Download and Verify Electrum

The hackers were arrested, bitcoin was seized but I doubt victims in 2018 will receive their bitcoin back.

How did you come to the conclusion that the address belong to the hacker?

According to this article[1]. That address belongs to a Bitcoin whale who withdrew his funds from Bitfinex a few months ago.

[1] https://www.benzinga.com/markets/cryptocurrency/23/06/32667156/dex-trading-bots-the-most-profitable-crypto-trading-strategies-are-hiding-in-plain-sight

Hi
i think a lot of users knew about Electrum fishing attack in 2018 when a fishing message
appear to electrum users asking them to update their wallet to a fake version that steal
your btc when you enter your password however till now the stolen btc is still moving and
i found that the hacker accumulated most of it in this adress
https://www.blockchain.com/explorer/addresses/btc/1Kr6QSydW9bFQG1mXiPNNu6WpJGmUa9i1g
do you think it still possible for the hacker to get arrested when he dicide to move any btc to an exchange to
transfer it into fiat since most of exchanges support KYC just like happened to the two hackers of bitfinex here if u didnt knew
https://www.justice.gov/opa/pr/two-arrested-alleged-conspiracy-launder-45-billion-stolen-cryptocurrency