Ringleader of $245M Crypto Theft Pleads Guilty
Bitcoin Magazine Ringleader of $245M Crypto Theft Pleads Guilty The 22-year-old criminal ringleader led one of the biggest bitcoin heists in U.S. history. This post Ringleader of $245M Crypto Theft...
The 22-year-old criminal ringleader led one of the biggest bitcoin heists in U.S. history.
The man behind one of the biggest bitcoin thefts in history this week pleaded guilty.
Malone Lam, 22, a Miami resident from Singapore, on Tuesday admitted his role as ringleader of the international crime group which stole 4,100 bitcoins — worth over $230 million at the time — to fund a life of luxury.
The U.S. Department of Justice said that from October 2023 and through at least May 2025, Lam and others hacked databases to steal crypto users’ information and con them into providing user logins and private keys. Bitcoin and other cryptocurrencies worth $245 million were taken in the theft.
On one occasion, a co-defendant broke into a residence in New Mexico and stole a hardware wallet while Lam monitored the victim’s movements by hacking their iCloud account.
“This defendant led an international network that preyed on victims through deception, invaded their privacy, and stole hundreds of millions of dollars in cryptocurrency,” U.S. Attorney Jeanine Ferris Pirro said in a statement.
“If you build a cybercrime empire, we will find you, dismantle your operation, and hold you accountable,” Attorney Pirro added.
The DOJ said: “The Racketeer Influenced and Corrupt Organizations Act conspiracy used social engineering and occasional home break-ins to obtain information that allowed the conspirators to drain their victims’ cryptocurrency wallets.”
The crimes started after a group of online gamers became friends before working together to commit the cybercrimes, the indictment read.
Lam and co-defendants laundered the stolen bitcoin and spent it on bottle service parties, private jet rentals, security guards, luxury handbags and watches, and properties in Los Angeles, the Hamptons, and Miami.
The defendants would spend up to $500,000 a night on parties and give away designer handbags worth tens of thousands of dollars, Tuesday’s announcement read.
Asanat Analysis — Why it matters
This case underscores a persistent vulnerability in crypto security: the human layer remains the primary attack vector. Despite billions in infrastructure investment, social engineering combined with database breaches and occasional physical theft (hardware wallet burglary) proved sufficient to compromise $245M in assets. The 18-month operational window (Oct 2023–May 2025) suggests law enforcement detection lag, raising questions about how similar rings operate undetected and what volume of unreported theft exists in the ecosystem.
The prosecution signals meaningful enforcement capability—tracking international cybercrime cells, tracing laundering flows through luxury consumption, and securing guilty pleas—but also reveals a structural gap: custodial and self-custody platforms alike depend on user credential hygiene and iCloud/email account security outside their control. The RICO charge (organized crime statute) frames this as enterprise-scale crime rather than isolated hacking, potentially widening DOJ's posture toward other crypto-native criminal networks still operating.
For institutional adoption, this case normalizes the security conversation around crypto holdings beyond technical cryptography. Insurance, custody standards, and multi-signature requirements now carry legal precedent weight. The defendants' profligacy (spending to $500k/night) reflects a known pattern in crypto theft cases—rapid, visible consumption that enables forensic tracking—but also signals that operational security discipline remains rare among perpetrators.