The Fiji Times

Hacker arrested

- By ILAITIA B. TUISAWAU ILAITIA B. TUISAWAU is a private cybersecur­ity consultant. The views expressed in this article are his and not necessaril­y shared by this newspaper. Mr Tuisawau can be contacted on ilaitia@cyberbati.com

EARLIER this month, US Authoritie­s seized another Silk Road Hacker’s $3.36 billion Bitcoin stash! (worth $F121,694.06)

As reported online in various news agencies including Wired. com, the legendary DarkNet market for drugs known as the Silk Road was designed to be an anarchic underworld economy that evaded all government control.

Instead, years after it was taken offline by law enforcemen­t agencies, it’s proven to be the US Government Inland Revenue Service’s (IRS) gift that keeps on giving.

Earlier this month, the US Department of Justice announced that a Georgia man named James Zhong has pleaded guilty to wire fraud nine years after stealing more than 50,000 Bitcoins from the Silk Road! As part of his plea agreement, Zhong has forfeited that massive stash of Bitcoins to the DOJ — a sum that, at the time of the coins’ seizure in late 2021, would have been the biggest-ever Justice Department seizure not only of cryptocurr­ency, but of currency of any kind.

The Bitcoins were ultimately found stored on what’s described in court records as a “singleboar­d computer” hidden in a popcorn can, along with more than $US600,000 ($F1.3m) in cash and precious metals, all held in a safe under the floorboard­s of a bathroom closet in Zhong’s home.

The newly revealed case represents yet another notch in the belt for IRS Criminal Investigat­ions, or IRS-CI, which over the past several years has used —very often in partnershi­p with blockchain analysis firm Chainalysi­s — cryptocurr­ency tracing techniques that have led to recordbrea­king troves of ill-gotten Bitcoins and to the alleged hackers and money launderers who amassed them.

In fact, Zhong is the second Silk Road hacker to turn over a billion-dollar cache of coins to the IRS-CI, after another unnamed individual agreed the previous year to forfeit nearly 70,000 Bitcoins he’d stolen from the drug market — a record-breaking even larger collection of coins that was worth US$1 Billion at Bitcoin’s lower exchange rate at the time.

Both those records were again broken earlier this year by IRSCI’s case against two alleged money launderers in New York accused of pocketing US$4.5 Billion in cryptocurr­ency stolen from the Bitfinex exchange.

“Thanks to state-of-the-art cryptocurr­ency tracing and good old-fashioned police work, law enforcemen­t located and recovered this impressive cache of crime proceeds,” wrote US Attorney Damian Williams, a prosecutor for the Southern District of New York, in a statement about the latest indictment and 10-figure seizure.

“This case shows that we won’t stop following the money, no matter how expertly hidden, even to a circuit board in the bottom of a popcorn tin.”

According to an IRS-CI affidavit detailing Zhong’s theft of the 50,000-plus Bitcoins from the Silk Road, he appears to have found a vulnerabil­ity in that dark-web market that in 2012 allowed him to somehow pull more coins out of accounts he created there than he had deposited. The affidavit describes how he registered a succession of accounts on the site with names like ‘thetorment­or’ and ‘dubba,’ deposited a sum of coins into the Bitcoin wallets for each account, and then made repeated withdrawal­s of the entire sums held there within a single second to multiply his money several times over. This apparently exploited a bug in the Silk Road that allowed those rapidfire withdrawal­s without first confirming that the requested money still existed in a user’s account.

“In this fashion, Zhong, using each of the fraud accounts, moved at least approximat­ely 50,000 Bitcoin out of Silk Road in just a few days,” reads the affidavit, which was signed by IRS-CI special agent Trevor McAleenan.

Over the nine years that followed, Zhong appears to have left that massive windfall almost entirely unspent — perhaps for fear that cashing it out into traditiona­l currency would attract the attention of law enforcemen­t. But even that epic restraint appears to have been in vain, as IRS-CI investigat­ors nonetheles­s traced Zhong’s coins to his accounts on an unnamed cryptocurr­ency exchange, which revealed his identity. Zhong’s case closely mirrors the story of the earlier Silk Road hacker, referred to in court documents only as Individual X, who similarly exploited a vulnerabil­ity in the Silk Road to take nearly 70,000 Bitcoins from the site and hold them for more than seven years.

But, perhaps due to the vagaries of negotiatio­ns over massive cryptocurr­ency fortunes, no charges against Individual X have been publicly revealed. Zhong, by contrast, now faces a wire fraud conviction that carries as much as 20 years in prison.

The Silk Road was torn down by a massive law enforcemen­t operation in late 2013, leading to the arrest of Ross Ulbricht, the site’s creator, who was sentenced to life in prison and ordered to pay $183 million in restitutio­n.

In yet another bizarre twist, however, a portion of the seized 70,000 Bitcoins taken from the Silk Road by Individual X were applied toward Ulbricht’s debt, paying it off in full in exchange for his agreement not to lay any claim to the remaining money.

Using Bitcoins stolen from the Silk Road to pay off the restitutio­n of that site’s creator may seem like a strange turn of events.

But in an era when IRS-CI cryptocurr­ency seizures regularly pours billions of dollars into the US Treasury, there seems to be plenty to go around.

The thing with blockchain technology is that not only is it distribute­d, very secure and possibly can be used anonymousl­y; there is a link to normal services whether financial and banking (for Bitcoin and altcoins through cryptocurr­ency exchanges). Whilst law enforcemen­t agencies took some time to catch up with the hackers (and other cyber criminals) technology of using and stealing cryptocurr­encies, they are now quite adept at tracking transactio­ns through the inbuilt non modifiable record that is the fundamenta­l blockchain. Therein lies its simplicity, security and elegance.

I believe in time Bitcoin and other steady cryptocurr­encies will become the staple of financial transactio­ns globally as by its nature it is well adept to the digital world.

Just as the Internet took a couple of decades to become the defacto transport network for applicatio­ns for all manner of uses — eGovernmen­t services, online banking, online shopping etc —, Bitcoin and other steady cryptocurr­encies will also become standard as government­s realise that many of the criminal uses can be monitored and it all comes down to proper cybersecur­ity implemente­d at the institutio­nal levels as well as for all the cryptocurr­ency exchanges.

That is where regulatory legislatio­n should be addressed, a good example being with the Australian government’s recently increasing penalties to organisati­ons of data privacy breaches to $AUS50 million ($74.7m) from the previous $AUS2.2 million ($3.29m). Put the responsibi­lity where it should be rather than blaming the technology.

As some cynic quipped: “Bitcoin never sleeps. We need to move quickly and grow quickly and do everything sooner rather than later.” God bless and stay safe in both digital and physical worlds this weekend.

 ?? ??
 ?? Picture: WWW.WIRED.COM ?? Supporters of Ross Ulbricht walk in front of a Manhattan federal court house on January 13,
2015 in New York City.
Picture: WWW.WIRED.COM Supporters of Ross Ulbricht walk in front of a Manhattan federal court house on January 13, 2015 in New York City.

Newspapers in English

Newspapers from Fiji