Summary
Federal prosecutors in Brooklyn have filed a superseding indictment charging 12 additional defendants in a cryptocurrency theft and racketeering conspiracy that netted more than $263 million across two operations. The group recruited members through online gaming platforms, assigned specialized roles across technical intrusion, social engineering, money laundering, and physical hardware theft, and moved stolen funds through mixers, peel chains, and fictitious identities before converting proceeds to cash and luxury goods.
Timeline
| Date | Event |
|---|---|
| Jul 2024 | $14 million stolen from a second victim in a targeted operation. |
| Aug 2024 | 4,100 BTC — valued at more than $230 million — stolen from an early Genesis creditor; group uses mixers, peel chains, and VPNs to launder funds. |
| Oct 15, 2026 | Superseding indictment unsealed in the Eastern District of New York charging 12 additional defendants; prior charges against earlier members remain pending. |
What Happened
The conspiracy organized itself through online gaming platforms, where members were recruited and assigned roles based on demonstrated skills. The group maintained functional specialization: some members handled technical intrusion and credential phishing, others managed laundering infrastructure, and others were responsible for physical operations — including break-ins at victims’ residences to obtain hardware wallets and seed phrase backups. This division of labor allowed the group to pursue both digital and physical attack vectors against high-value cryptocurrency holders.
Stolen funds were laundered through a layered process using cryptocurrency mixers, peel chain transactions, VPN infrastructure, and accounts established under fictitious identities. Despite these efforts, investigators traced spending that included approximately $4 million at nightclubs, $9 million on automobiles and other luxury goods, and additional outlays on private jet charters. The August 2024 theft of 4,100 BTC from an early Genesis creditor remains the largest single operation attributed to the group, exceeding $230 million at time of theft.
The superseding indictment adds 12 defendants to charges previously brought against earlier members of the conspiracy. The case illustrates the increasing operational sophistication of cryptocurrency theft groups, which have moved beyond purely technical attacks to incorporate social engineering, physical intrusion, and structured criminal organizations with defined roles and internal accountability.