U.S. authorities have launched an international enforcement action against cryptocurrency exchange Bitzlato, with the Justice Department announcing the arrest of the platform’s Russian co-founder and majority owner, Anatoly Legkodymov. The case is being framed by prosecutors as a major strike against crypto-enabled financial crime, with officials alleging that the exchange processed hundreds of millions of dollars in illicit funds and played a role in laundering proceeds connected to darknet markets and ransomware activity.
According to the U.S. Department of Justice, Legkodymov, a resident of China, was arrested in Miami by the FBI. Prosecutors said the exchange, registered in Hong Kong and described by U.S. officials as China-based, operated as a venue that knowingly served criminal actors. The DOJ’s public statements made clear that this was not an isolated domestic operation, but part of a broader cross-border effort involving U.S. agencies, the Treasury Department, and French law enforcement.
A coordinated action targeting alleged crypto crime infrastructure
Deputy Attorney General Lisa Monaco said during a press conference that the operation had “disrupted Bitzlato,” which she described as an exchange notorious for laundering criminal proceeds from the darknet and ransomware attacks. She characterized the action as a significant blow to the crypto crime ecosystem, signaling that authorities continue to view certain lightly regulated or offshore crypto venues as key nodes in illicit financial networks.
The language used by U.S. officials suggests that the government sees exchanges like Bitzlato not merely as passive intermediaries, but as infrastructure that can facilitate the movement of criminal funds at scale. Monaco also alleged that the platform functioned as a “high-tech financial hub” that, in her words, catered to “known crooks,” indicating that the legal theory behind the case may rest not only on suspicious flows, but on claims of willful tolerance or active servicing of illicit users.
Hydra links and the $700 million allegation
A central element of the case is Bitzlato’s alleged connection to Hydra, the Russian-language darknet marketplace that was shut down in April 2022 by German police with support from U.S. agencies. U.S. authorities say Bitzlato was a crucial financial resource for Hydra, helping to move money tied to illegal purchases and criminal sales.
The DOJ alleges that between 2018 and 2022, Hydra buyers used accounts hosted at Bitzlato to fund illicit transactions, while sellers of drugs, stolen financial information, and hacking tools sent their proceeds to accounts at the exchange. In total, authorities claim there were about $700 million in direct and indirect transfers between Hydra and Bitzlato during that period.
That figure is likely to remain one of the most closely watched parts of the case because it speaks to the scale of the platform’s alleged exposure to criminal activity. While prosecutors have not, in the material provided, broken down the exact composition of those flows, the accusation places Bitzlato among the most serious examples cited by regulators and law enforcement when arguing that some parts of the crypto trading ecosystem still pose substantial anti-money laundering risks.
Servers seized and website replaced
The enforcement action extended beyond the arrest. U.S. officials said the operation involved a coordinated disruption campaign across several European countries, including the seizure of Bitzlato’s servers. Reuters reported that by midday Wednesday, the exchange’s website had been replaced with a notice stating that the service had been seized by French authorities.
This detail is important because it shows that the action was not limited to charging an individual executive. Authorities appear to have targeted the platform’s operational capacity directly, which can significantly impair customer access, trading functionality, and any effort by the exchange to continue serving users while the legal process unfolds.
For the broader market, this kind of intervention underscores how deeply law enforcement cooperation has evolved in cases involving digital assets. Exchanges operating across jurisdictions may face simultaneous legal, technical, and administrative disruptions if multiple countries decide to act together.
Bitzlato says it was hacked and halts withdrawals
At roughly the same time as the law enforcement action became public, Bitzlato posted messages on Telegram saying the exchange had suffered a hack. The platform told users that withdrawals had been suspended indefinitely and asked them not to send additional coins to the service until the issue was resolved.
In its statement, Bitzlato said that “part of the funds was withdrawn from the service” and described the loss as a small portion of the funds, though it did not disclose a specific amount. The exchange also attempted to reassure customers by saying that user assets were not lost and that it would refund all affected victims.
Even so, the exchange’s public explanation leaves major questions unanswered. No technical details were provided regarding the nature of the breach, the timing of the attack, or whether the alleged hack occurred before, during, or after the enforcement operation. With the platform offline at the time of reporting, users were left with limited visibility into the status of funds and no clear timeline for a resumption of services.
Maintenance notice preceded the shutdown
One day earlier, Bitzlato had announced scheduled maintenance for Thursday, Jan. 19, saying the work was intended to improve service operations and security. According to that notice, transactions would be halted between 5 and 9 a.m. Moscow time, and deposits, withdrawals, and trading were expected to be disabled during the maintenance window.
In hindsight, that announcement has drawn added attention because it came just before the exchange said it was hacked and shortly before the impact of the enforcement action became evident. Based on the available material, however, there is no confirmed evidence tying the maintenance notice to either the alleged hack or the government seizure. What is clear is that the platform entered a period of severe disruption, with customers facing both a law enforcement shutdown and a withdrawal freeze.
Bitzlato’s background and regional relevance
Bitzlato was launched in 2016 under the name Changebot and later became a cryptocurrency exchange offering peer-to-peer trading services. The platform listed trading pairs involving the Russian ruble and major digital assets such as BTC, ETH, and USDT, and supported a variety of payment methods.
Platforms of this type have been particularly visible in Russia and across parts of the former Soviet space, where online crypto exchangers and P2P venues often serve users seeking flexible rails between local currency and digital assets. At the same time, the source material notes that crypto assets remain incompletely regulated in much of the region, leaving some operators exposed to heightened scrutiny and enforcement risk.
The Bitzlato case therefore sits at the intersection of several themes that continue to shape the industry: the use of crypto rails in cross-border illicit finance, the compliance expectations placed on exchanges, and the vulnerability of offshore or lightly supervised platforms to coordinated international action. For users, it is also a reminder that legal risk, operational risk, and cybersecurity risk can converge rapidly at a single venue.
What the case signals for the crypto sector
While the allegations against Bitzlato will ultimately be tested through legal proceedings, the immediate message from authorities is clear: exchanges seen as servicing high-risk or criminal users remain a prime target. The case also highlights how regulators and law enforcement agencies are increasingly willing to combine arrests, infrastructure seizures, and public messaging to disrupt platforms they believe are embedded in illicit ecosystems.
For the crypto industry, the enforcement action adds to pressure on trading venues to demonstrate robust anti-money laundering controls, meaningful customer due diligence, and transparent risk monitoring. For customers of Bitzlato, the more urgent issue is practical: the platform is offline, withdrawals are suspended, and the exchange’s assurances of reimbursement remain unverified as the situation develops.
Whether more platforms face similar action will depend on the facts of individual cases, but Bitzlato has now become a high-profile example of how quickly a crypto venue can move from active operation to legal shutdown when international authorities allege deep involvement in criminal finance.