A filing submitted by the US Department of Justice on January 15, 2026 identified Bitfinex as the sole victim of the 2016 hack. That position centers the case on the fate of roughly 94,636 BTC. According to the source material, the stash accounts for about 30% of the US strategic bitcoin reserve and is worth about $6.4 billion at current prices.
The filing also narrows the legal path for former customers who directly absorbed losses in 2016. If Bitfinex is treated as the only victim, individual users do not hold direct claims in the case. Market attention is now fixed on a second question as well: whether any return of the recovered coins would activate the LEO token buyback-and-burn terms written into iFinex documents.
2,072 withdrawals drained 119,754 BTC in one night
On August 2, 2016, Bitfinex recorded a series of withdrawal requests that appeared valid inside its own systems. The requests passed the expected multisignature checks and carried legitimate-looking credentials. The problem was the destination: 2,072 transactions, totaling 119,754 BTC, all ended up pointing to the same outside wallet.
The article says the breach hinged on Bitfinex’s multisig setup with BitGo. In theory, withdrawals required authorization from both Bitfinex and BitGo. Investigators later concluded that the attacker used administrative access inside Bitfinex’s backend to bypass BitGo’s approval layer, making the system accept transfers as if both sides had signed off. After that, access credentials and operating logs on the servers were removed, cutting off the most direct trail.
Bitfinex later imposed an across-the-board haircut of about 36% on user balances. Customers received BFX tokens as compensation, with the recovery mechanism later tied into LEO. That response became central to the legal argument that users had already been compensated, even though many affected account holders never viewed the outcome as equivalent.
Six years of movement ended with arrests and key recovery
Moving such a large amount of stolen bitcoin without detection proved difficult. The article describes small transfers beginning in early 2017, with funds moving first through AlphaBay and, after the marketplace was shut down in July 2017, through Hydra. Other portions were converted into gold coins and Walmart gift cards in attempts to break up the on-chain trail.
On February 8, 2022, the FBI arrested Ilya Lichtenstein and Heather Morgan in New York. Investigators recovered wallet private keys from their devices and found more than 94,000 BTC. At 2022 market prices, the source puts that amount at about $4.5 billion. Chain analysis was a major part of the case; even layered mixing activity did not erase bitcoin’s permanent transaction history.
The criminal case moved in stages after that. Lichtenstein pleaded guilty in August 2023, admitting he carried out the 2016 attack. In November 2024, a federal court sentenced him to 60 months in prison, while Morgan received 18 months. He was released on January 2, 2026 after serving 14 months and shifted to home confinement, according to the article.
Recovered bitcoin sits between forfeiture law and restitution
The article states that US authorities recovered more than 119,000 BTC through seizure and follow-up investigation, with a current value of over $8 billion. The legal tension is concentrated in the 94,636 BTC discussed in court filings. Those coins exist at the intersection of criminal forfeiture and civil ownership claims.
In 2025, the Trump administration announced a US strategic bitcoin reserve to hold bitcoin seized in law enforcement cases rather than auctioning it. That turned the Bitfinex coins into a more complicated category of asset. If a court treats them as property that should be returned to a victim, they may leave the reserve. If they remain forfeited government property, they stay where they are.
The DOJ filing from January 15, 2026 points in the first direction by arguing that the exchange itself should receive the coins as the only recognized victim in the case.
LEO pricing reflects the buyback clause tied to recovered funds
In 2019, iFinex privately issued UNUS SED LEO and raised about $1 billion. Its white paper includes two burn mechanisms. One commits at least 27% of the prior month’s consolidated revenue to market buybacks and token burns. The other says that if Bitfinex recovers stolen assets from the 2016 hack, at least 80% of the net recovered amount, after legal and operating costs, will be used to buy back and burn LEO on the open market.
That clause is now the center of the token’s valuation debate. If the full 94,636 BTC is returned and Bitfinex follows the 2019 commitment, the article estimates that value equivalent to about 75,000 BTC would be directed toward repurchases. Spread across 18 months, the pace would equal roughly 139 BTC per day in market buying. The same report says LEO is trading at a premium of about 60%, largely reflecting this expectation.
It also outlines two alternative outcomes. One is a partial return if third-party claims are accepted, which would drag the process into a longer allocation fight. The other is a final determination that the coins belong to the government as forfeited assets, leaving them inside the US reserve and removing the basis for the LEO recovery thesis. For former Bitfinex users who took the 2016 haircut, that legal answer would still not resolve the gap between formal compensation and actual loss.