The Bitfinex Thief: A Hacker Talks About Hacking
In August 2016, more than 100,000 BTC were stolen from Bitfinex overnight. The main perpetrator, Ilya Lichtenstein, and his wife were arrested for participating in the laundering of $4.5 billion and sentenced to five years in 2024.
This January, he was released early and gave himself a label: white-hat hacker.
After the Binance crypto theft, he also shared some of his thoughts—in short, a hacker talking about hacking.
He believes North Korean hackers probably don’t attack exchange servers directly. Instead, they may first send phishing emails to employees, plant malware, and then use employees’ access privileges to get into the internal network.
It’s not enough for an exchange to secure its website. Internal systems and employees’ computers can also become points of entry.
Stealing the crypto doesn’t mean the job is done. Hackers also have to quickly split up the funds, move them to different addresses, and cover their tracks.
He placed particular emphasis on the 48-hour window: the first 48 hours after funds are stolen are crucial for tracking and freezing the assets.
He noted that AI is lowering the barrier to launching cyberattacks, creating what are called “basement kids.”
The gap between China’s open-source models and top-tier AI may be only three to six months. In a few months, ordinary people may have access to attack tools that were once available only to professional hackers.
Hackers used to break through the front door. Now they come in through the back door, the windows, or even the sewers.
AI is changing the whole world, but it’s also giving hackers more capable tools and making crypto theft easier. With more advanced AI, anyone could even become a top-tier hacker. That’s what we really need to worry about.
Technology has no good or evil; people do.
In August 2016, more than 100,000 BTC were stolen from Bitfinex overnight. The main perpetrator, Ilya Lichtenstein, and his wife were arrested for participating in the laundering of $4.5 billion and sentenced to five years in 2024.
This January, he was released early and gave himself a label: white-hat hacker.
After the Binance crypto theft, he also shared some of his thoughts—in short, a hacker talking about hacking.
He believes North Korean hackers probably don’t attack exchange servers directly. Instead, they may first send phishing emails to employees, plant malware, and then use employees’ access privileges to get into the internal network.
It’s not enough for an exchange to secure its website. Internal systems and employees’ computers can also become points of entry.
Stealing the crypto doesn’t mean the job is done. Hackers also have to quickly split up the funds, move them to different addresses, and cover their tracks.
He placed particular emphasis on the 48-hour window: the first 48 hours after funds are stolen are crucial for tracking and freezing the assets.
He noted that AI is lowering the barrier to launching cyberattacks, creating what are called “basement kids.”
The gap between China’s open-source models and top-tier AI may be only three to six months. In a few months, ordinary people may have access to attack tools that were once available only to professional hackers.
Hackers used to break through the front door. Now they come in through the back door, the windows, or even the sewers.
AI is changing the whole world, but it’s also giving hackers more capable tools and making crypto theft easier. With more advanced AI, anyone could even become a top-tier hacker. That’s what we really need to worry about.
Technology has no good or evil; people do.