Sophisticated $25M ethereum heist took about 12 seconds, DOJ says

Atrius

Seniorius Lurkius
18
So, the data has value and stealing the ones and zeroes makes you a criminal because it has value? Who says it has value? Why is this a legal matter?

Does the FBI get involved if a person steals someones virtual goods in a video game? What if it's something that you never paid any money for? How does something have value to be protected in such a way? How come when this happens in EVE online no one goes to jail?

I'm so confused where the bits and data that are just made up scores and points warrant legal financial securities protection.
 
Upvote
-9 (5 / -14)
Post content hidden for low score. Show…

Zapfenzieher

Wise, Aged Ars Veteran
108
They got that backwards. Sure they were that smart?
Hah! They were even smarter, because if they had googled for the opposite, it might have drawn some unwelcome covert attention. Most countries that the USA will extradite to have a reciprocal agreement - which is what they were seeking to avoid.
 
Upvote
1 (1 / 0)

OrvGull

Ars Legatus Legionis
10,631
Sure blame cryptocurrency for fiat bank doing KYC as required by law.
The "fiat banks" I've worked with have been far more competent at it. When the only way to submit your ID is through an app that doesn't work, well, that's just stonewalling through deliberate incompetence.

Fortunately I only lost a few hundred dollars so it was a relatively cheap lesson.
 
Upvote
18 (18 / 0)

sep332

Ars Praefectus
4,138
Subscriptor++
Upvote
10 (10 / 0)

RickVS

Ars Praetorian
503
Subscriptor
Give them probation and offer cybersecurity jobs, not 20 years if they can be corrected. They did wrong but should not waste their lives on that. Srsly not everything should be valued by money only
Perhaps if they are cyber security experts for a child's lemonade stand but if I had a company with bank accounts I wouldn't want to be holding the bag when they recidivate (67% chance).
 
Upvote
3 (5 / -2)

terrydactyl

Ars Tribunus Angusticlavius
6,745
Subscriptor
Half seriously: why bother prosecuting them? I detest crypto, and I mostly think the libertarian lunatics who love it have this kind of thing coming. A couple of MIT students burned arbitrage bots? So much the better. Code is law? You wanted to defang the state? Wishes granted.

To some degree, the DOJ getting involved in crypto lends the whole thing an air of legitimacy. Maybe if they let the libertarians figure it out amongst themselves, the whole thing would come crashing down--and the world would be a better (and literally cooler) place for it.
I couldn't resist this
8q7soh.jpg
 
Upvote
33 (35 / -2)
Post content hidden for low score. Show…
Half seriously: why bother prosecuting them? I detest crypto, and I mostly think the libertarian lunatics who love it have this kind of thing coming. A couple of MIT students burned arbitrage bots? So much the better. Code is law? You wanted to defang the state? Wishes granted.

To some degree, the DOJ getting involved in crypto lends the whole thing an air of legitimacy. Maybe if they let the libertarians figure it out amongst themselves, the whole thing would come crashing down--and the world would be a better (and literally cooler) place for it.

That’s kind of how I feel, but when they then cash out the money to real money it has real impacts on everyone else.

but then if crypto has Swiss cheese unregulated security, why should the government commit to defending this? Next step is regulation but then that fully legitimizes it and is going to be very costly for congress to build up the expertise to know how to fix roll ups.

Would be ironic if all roll ups had to be run by the federal reserve or reputable banks and thus these types of trust violation attacks wouldn’t be possible.
 
Upvote
7 (7 / 0)

OrvGull

Ars Legatus Legionis
10,631
It's very unfortunate that they got caught. The act of exposing crypto and the sacred blockchain as fraudulent was extremely valuable to society; they deserve to keep the rewards of the heist that brought us that information.
Rooting against these guys does feel a bit like cheering for the house in Blackjack.
 
Upvote
6 (9 / -3)

Marlor_AU

Ars Tribunus Angusticlavius
7,235
Despite this all being on the blockchain, it feels like a financial crime to me. They intercepted transactions and stole the proceeds. This isn't a victimless crime - people lost cryptocurrency in the process.

While it's not hard cash they stole, they are real transactions that were intercepted. Really, it's no different to hacking into a service that maintains user account balances and stealing that balance. Those account balances are similarly "imaginary", but anyone doing that would surely be prosecuted in such a case.

Where it would get more interesting is if they had found a way to exploit the blockchain to create cryptocurrency outside of normal processes. In that case, where nothing is actually stolen, I think there would be a much more interesting and nuanced debate about blockchain exploits.
 
Last edited:
Upvote
5 (7 / -2)
If the code let it happen, it has to have been legit, right? I see no reason for any authorities to intervene here.
Here's their reason:
To uncover the scheme, the special agent in charge, Thomas Fattorusso of the IRS Criminal Investigation (IRS-CI) New York Field Office, said that investigators "simply followed the money."
 
Upvote
9 (10 / -1)
I owned some cryptocurrency once and found it was nearly impossible to convert into a spendable form.

If you just want to hold on with your diamond hands and brag about how much you have on paper, that's great, but as a way to buy "basic things" it seems pretty useless.
Even if it was a useful way to buy basic things... enlightened.doggo's idea that inflation can only happen with regular currency is hilarious. If the price of an Egg McMuffin goes up because the suppliers and deliverers of eggs are charging more, that doesn't mean the currency was "devalued" due to some weakness inherent to the currency. Those companies raised prices because the companies they buy things from have raised prices, due to supply issues, labor costs, etc., etc. If all of those transactions were being done in crypto, the companies would still have the same reasons for raising prices. There is no stable magic number for the "real" value of an egg in Ethereum any more than there is in dollars.
 
Upvote
21 (21 / 0)

passivesmoking

Ars Tribunus Angusticlavius
7,890
To receive such intellectual gifts and elite education and then only aspire to be crypto thugs...
I don't know, I've always believed that the whole thing was a house of cards, and all it took was two really smart people to rip the entire edifice down in 12 seconds. Maybe this will finally be the end of the Crapto trend.

Maybe they only had their own greedy self-interest at heart, but the truth is they've possibly done the world a massive favour by blowing a gaping hole in the Crapto bro's libertarian utopian BS. Pretty hilarious to me too that it also doubled as an act of epic self-sabotage.

But hey, they're smart, and smart people rarely see actual prison time. I'm sure there's an alphabet agency who'd love to get them on the payroll.
 
Upvote
-8 (0 / -8)
I agree these coins aren't real, but neither is a condo in Florida that doesn't exist, and that'll get you 20 for wire fraud for trying to sell that..
Presumably with actual real $dollars involved - yes. But that’s the difference, isnt it? It’s actual real $dollars…

If I convince you to give me 1,000,000 world of Warcraft coins for a condo in Florida that doesn’t exist, is that 20 years too?
 
Upvote
0 (0 / 0)

passivesmoking

Ars Tribunus Angusticlavius
7,890
Steal $25 million of cryptocurrency because you found a way to change the "unchangeable" ledger: Arrested within a year and a half, charged with crimes and face 20+ years in prison.

Doesn't make their theft right, but it goes to show that wronging specific people will get you in trouble a lot faster than others. I hate this reality.

Edit changed my mind on one part of my rant.
It's unlikely they'll see the inside of a real prison. People smart enough to leave the blockchain priesthood with egg on its face are a valuable resource to somebody. I'm sure an alphabet agency will be interested in arranging for some kind of a deal.
 
Upvote
-6 (3 / -9)
I assume the search history was provided to the FBI by the search engine or the internet provider. Honest question, is there a way to keep that private? (If you tell me, I won't use this info to plan a crime, I promise). Thanks.
It's possible that the FBI found the search history on their computers after seizing them.
 
Upvote
11 (11 / 0)

bb101

Smack-Fu Master, in training
40
To receive such intellectual gifts and elite education and then only aspire to be crypto thugs...

Yet another harm from this cancer is that it diverts real talent into destructive / unproductive bullshit.

Can you imagine what sort of crimes these people would commit if they applied their skills to alternate fields, such as biotech or nanotechnology? The fields where if ethics are transgressed, we all die? Perhaps time to start concentrating on morals and ethics in university courses?

Paraphrasing a quote I once read: using your mind to commit a crime is no different to others relying on brute force.
 
Upvote
9 (9 / 0)

Cthel

Ars Tribunus Militum
7,468
Subscriptor
Can you imagine what sort of crimes these people would commit if they applied their skills to alternate fields, such as biotech or nanotechnology? The fields where if ethics are transgressed, we all die? Perhaps time to start concentrating on morals and ethics in university courses?

Paraphrasing a quote I once read: using your mind to commit a crime is no different to others relying on brute force.

Oh good, we're heading for a future where "Ransomware Infection" isn't metaphorical aren't we?
 
Upvote
6 (6 / 0)
So smart enough to hack the Ethereum network. But not smart enough to use a VPN when planning a crime. Makes me wonder how much crypto money has been stolen that we don't hear about because the thefts are not as obvious.

It never really said how there were caught other than they followed the money. It sounds like no one caught them from their methods, and how could they if that sophisticated. It seems like they brute forced it by seeing where the money went and maybe found people of interest. If they really did set up a bunch of shell companies, that would be a lot easier to trace back than some zero day crypto exploit only a handful of people could understand much less do.
 
Upvote
1 (1 / 0)

bb101

Smack-Fu Master, in training
40
Oh good, we're heading for a future where "Ransomware Infection" isn't metaphorical aren't we?
Maybe this is the Great Filter in its very nascent stage. How does civilisation prevent a handful of people, making use of virtually unlimited leverage, from annihilating the entire population?
 
Upvote
4 (4 / 0)

Fuzzypiggy

Ars Scholae Palatinae
1,042
To receive such intellectual gifts and elite education and then only aspire to be crypto thugs...

Yet another harm from this cancer is that it diverts real talent into destructive / unproductive bullshit.

Don't know why but it reminds me of the Big Bang episde where Sheldon tries to go off-grid by removing the signage from his apartment building, forgets that his girlfriend has been there several times and is shocked when she comes by and knocks on his door!
 
Upvote
4 (4 / 0)

Cthel

Ars Tribunus Militum
7,468
Subscriptor
Maybe this is the Great Filter in its very nascent stage. How does civilisation prevent a handful of people, making use of virtually unlimited leverage, from annihilating the entire population?

Researchers at the Sackler institute assure me that no-one would ever try to get rich by creating a epidemic and then selling the treatment.
 
Upvote
8 (10 / -2)

unequivocal

Ars Praefectus
4,800
Subscriptor++
Presumably with actual real $dollars involved - yes. But that’s the difference, isnt it? It’s actual real $dollars…

If I convince you to give me 1,000,000 world of Warcraft coins for a condo in Florida that doesn’t exist, is that 20 years too?
What is the usd equivalent of WoW coins? Etherium has a real usd conversion rate - theft via fraud of intangible property with a real value is still a crime.
 
Upvote
-1 (1 / -2)
Post content hidden for low score. Show…
I'm gonna be bad for just a minute and say that this is impressive. Criminal, for sure, but impressive.

Blowing a gigantic hole in the whole "Blockchain is completely secure" trope really ought to earn these folks at least some leniency from the judge.

Not bad…I am impressed as well. My first hack was in 1971-72; got into a banking system IBM host. For 6 months.

Was never detected. Did NOT steal anything except massive amounts of compute time for a physics project.

I doubt this is the last, and for all the FBI bluster, they are not going Pokemon and catching them all.
 
Upvote
4 (4 / 0)
The "fiat banks" I've worked with have been far more competent at it. When the only way to submit your ID is through an app that doesn't work, well, that's just stonewalling through deliberate incompetence.

Fortunately I only lost a few hundred dollars so it was a relatively cheap lesson.
Well I've moved very large sums of cash and cryptocurrency between US exchanges, banks and wallets without a single issue ever. It's like cooking I guess.
 
Upvote
-13 (1 / -14)