It reads like a Coen brothers film: a computer science graduate, a cocaine purchase, and a multimillion-dollar glitch that led to the largest bitcoin theft in history. In 2012, James “Jimmy” Zhong, then a 28-year-old University of Georgia graduate, discovered a critical vulnerability in the hot wallet of the darknet marketplace Silk Road. Over the next two years, he drained the platform of more than 51,680 bitcoin — worth approximately $3.4 billion at 2023 prices.
The Glitch, The Stash, and The Cocaine
Zhong’s path to infamy began with a mundane purchase: he bought cocaine on Silk Road and accidentally uncovered a flaw that allowed him to repeatedly withdraw funds from the site’s hot wallet. According to Vinny D’Agostino, the FBI trial agent for the original Silk Road case, founder Ross Ulbricht was aware of his weak security and tried to patch the gap but failed. D’Agostino shared a spreadsheet from Ulbricht’s Samsung 700z laptop, where Ulbricht logged his net worth — a number that took a severe hit after the theft.
Despite later run-ins with law enforcement (a DUI and a felony drug possession charge), Zhong continued to live extravagantly, purchasing luxury cars and throwing lavish parties, all while the stolen bitcoin lay dormant in a hidden wallet.
Two Fateful Mistakes in 2019
Zhong’s luck ran out in March 2019 when burglars broke into his home and stole approximately $400,000 in cash and bitcoin. In an inexplicable move, Zhong called 911 and asked the local police to investigate. This triggered a multi-agency probe involving the IRS, who had been monitoring the case after Zhong transferred a small portion of the stolen bitcoin to a KYC-compliant exchange.
IRS agents, working with the Athens police, launched a covert operation. In November 2019, they searched Zhong’s property and discovered the majority of the stolen bitcoin hidden inside a popcorn tin — stored on an old computer’s encrypted wallet.
Sentencing and Aftermath
Zhong was arrested, pleaded guilty to one count of wire fraud, and in 2022 received a sentence of 366 days in prison. His lawyer successfully argued that the crime was “victimless” because the funds were taken from a criminal enterprise (Silk Road). D’Agostino later remarked, “The fact that Jimmy called the cops after having some of his bitcoin stolen highlights how many cyber criminals (including Ross) were brilliant but lacked street smarts.”
The story, popularized by an X thread from pseudonymous user BTCGandalf, continues to spark debate in the crypto community: is there more bitcoin hidden away? Zhong’s own comment upon conviction: “I knew it was wrong, but I couldn’t resist.”