Fall ResetAmazon USFall reset deals: check better picks before checkoutAmazon US: today's deals, useful picks and quick comparisons.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowFall ResetAmazon USWork and home upgrades are worth comparing todayAmazon US: today's deals, useful picks and quick comparisons.See Picks×
Skip to content
Blog

Hacker Who Stole Nearly 120,000 Bitcoin Wants a Second Chance—and a Security Job

By TheFinanceBase Team5 min read
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

Ilya Lichtenstein, whom U.S. authorities identified as the hacker behind the 2016 Bitfinex theft, is seeking work in cybersecurity after serving a federal sentence. He was sentenced to 60 months for a money-laundering conspiracy arising from the theft—not sentenced under a separately stated computer-hacking conviction. Available reporting says he was released to home confinement in January 2026; it does not show that he has secured a security job.

What Ilya Lichtenstein did

In August 2016, Lichtenstein breached Bitfinex, a cryptocurrency exchange. According to the U.S. Department of Justice, he fraudulently authorized more than 2,000 transactions that transferred approximately 119,754 bitcoin to a wallet he controlled.

The commonly used figure of “120,000 bitcoins” is therefore a rounded description. Prosecutors also said he tried to conceal the intrusion by deleting network credentials and log files.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Lichtenstein’s wife, Heather Morgan, later helped launder the proceeds. Authorities arrested both of them in February 2022.

#1 Best Overall
Ledger Nano X - Classic Crypto Wallet with Bluetooth
  • Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
  • Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
  • Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
  • Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
  • Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.

How much was the stolen bitcoin worth?

The answer depends on the date. Bitcoin traded at a fraction of its later value in 2016. When the arrests and seizure were announced in February 2022, the DOJ said the recovered bitcoin was worth more than $3.6 billion. That figure should not be treated as a permanent valuation: bitcoin’s price changes continuously.

Claims about the theft being worth a particular amount “today” need a date, a bitcoin price and a precise coin count. Without those details, a dollar figure can quickly become misleading.

What happened to the bitcoin?

After the theft, Lichtenstein and Morgan spent years moving and disguising the proceeds. DOJ materials describe transfers through cryptocurrency exchanges, darknet markets, transactions using fictitious identities and other methods.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The major breakthrough came when investigators obtained access to files containing wallet information and private keys. The government then seized approximately 94,000 to 95,000 bitcoin connected to the theft. This was not simply a matter of following public blockchain transactions; investigators also obtained information that enabled access to the wallets.

The DOJ established a victim-information website for people claiming harm from the Bitfinex theft. The recovery should not automatically be described as proof that every affected customer was made whole. The final treatment of recovered assets, restitution and any distribution depends on court orders and official notices.

Rank #2
TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet
  • Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
  • Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
  • Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
  • Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
  • Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets

His conviction and sentence

Lichtenstein pleaded guilty to conspiracy to commit money laundering. The case arose from the Bitfinex hack, and DOJ statements describe him as the person who carried out the intrusion, but his reported five-year sentence was for the money-laundering conspiracy.

On November 14, 2024, a federal court sentenced him to 60 months in prison, followed by three years of supervised release, according to the DOJ sentencing announcement. He had been arrested in February 2022 and pleaded guilty in 2023.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Ars Technica reported in January 2026 that Lichtenstein had been released to home confinement earlier that month. A sentence of five years does not necessarily mean five uninterrupted years in a prison facility: time already credited, placement decisions and other lawful mechanisms can affect where and how a sentence is served. The available reporting does not establish every detail of his release terms. Home confinement and supervised release also do not mean unrestricted freedom.

Why he says he wants to work in cybersecurity

In a January 22, 2026 LinkedIn post discussed by Ars Technica, Lichtenstein described the theft as the worst thing he had done and said he had misused his technical abilities. He contrasted his former “black hat” activity with working alongside government investigators and said he wanted to apply his understanding of attacker behavior to cybersecurity.

He also said that studying mathematics in the prison library helped him occupy his mind and that he had assisted federal authorities on other cryptocurrency cases. Those statements are his account, not independent proof that he has been rehabilitated or that he is suitable for a particular job.

Rank #3
Ledger Nano S Plus - Classic Crypto Wallet
  • All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
  • Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
  • Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
  • Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
  • Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.

The distinction matters: he has expressed an ambition to work in cybersecurity. Available reporting does not verify that a security company, government agency or consultancy has hired him.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Could a company legally hire him?

A criminal conviction does not automatically make every private-sector cybersecurity job impossible. But an employer’s decision depends on the role, jurisdiction, background-check rules, insurance, contractual obligations, compliance requirements and the conditions of supervised release.

The practical question is not simply whether Lichtenstein is “rehabilitated.” It is whether a specific employer can manage the risk associated with giving a person convicted in a major financial crime access to sensitive systems.

Concerns could be especially serious for roles involving:

  • cryptocurrency custody or private keys;
  • privileged identity administration;
  • live financial systems;
  • unilateral authority to move money or change production systems;
  • confidential customer data;
  • government classified information or a security clearance.

It would be too broad to say that he could never obtain a government clearance or work in security. Clearance and suitability decisions are fact-specific, and private employers make their own risk determinations. Conversely, legal eligibility does not require an employer to consider someone suitable for a sensitive position.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Trezor Safe 5 - Crypto Hardware Wallet with Secure Element & Passphrase, Color Touchscreen, Haptic Feedback, Bitcoin Security, Supports 1000s Coins & Tokens, Quick & Simple Setup (Charcoal Black)
  • UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
  • EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
  • ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
  • SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
  • EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What could make him employable?

Factors in his favor could include accepting responsibility, cooperating with investigators, helping recover assets, completing his sentence, demonstrating technical competence and maintaining a sustained record of lawful conduct.

Credible references, transparent disclosure, controlled work samples and endorsements from investigators or educators could also matter. But none of these factors erases the scale or intentionality of the original crime.

A cautious employer might begin with work that limits access to production systems, customer funds and private keys. Possible safeguards include:

  • least-privilege access;
  • segregation of duties and dual approval for sensitive actions;
  • immutable audit logs;
  • hardware-backed authentication;
  • isolated testing environments;
  • regular access reviews;
  • restrictions on outside cryptocurrency activity;
  • staged privileges during a probationary period.

These are general security controls, not evidence that any employer has offered Lichtenstein a position.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The case for—and against—giving him a chance

The argument for hiring him is that someone who understands how attackers think may help defenders identify weaknesses and anticipate adversarial behavior. His cooperation, asset recovery and prison sentence are also relevant to a rehabilitation argument.

Best Value
Trezor Safe 7 Crypto Hardware Wallet with Bluetooth for Android/iOS/Desktop
  • Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
  • Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
  • See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
  • Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
  • Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.

The argument for caution is equally strong. The Bitfinex theft was deliberate, technically sophisticated and financially motivated. Those same skills can create risk if an employer grants excessive trust or access. Clients, insurers and regulators may also object even when a hire is legally permissible.

“It takes a thief to catch a thief” is not a sufficient cybersecurity hiring policy. Professional security depends on trust, accountability, monitoring and carefully limited access. Forgiveness and employment are separate decisions: a person can deserve an opportunity to rebuild without being entitled to privileged access to sensitive systems.

What happens next?

Lichtenstein’s public statement leaves several questions unanswered: whether he will find an employer, what restrictions remain during supervised release, whether a company will publicly support the hire and whether he can demonstrate sustained lawful conduct over time.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For now, the accurate description is narrower than some headlines suggest: the former Bitfinex hacker is seeking a second chance and says he wants to work in cybersecurity. He has not been shown to have obtained that job.

Quick Recap

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Written by TheFinanceBase Team

The Team behind TheFinanceBase.

Add your note

Your email address will not be published. Required fields are marked *

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.