CASE FILES
WORD SEARCH

Modern True Crime

Ilya Lichtenstein and the Bitfinex Theft

The logs vanished. The bitcoin trail did not.

Play the free sample ↓
MODERN-C06-S1 / 1. A BREACH FOLLOWED BY YEARS OF CONCEALMENT
An imagined vintage detective office with case files and warm lamplight.
Illustrative office artwork—not an authentic case photograph.
01 / Open the case · Read the story

1. A breach followed by years of concealment

In August 2016, more than 2,000 unauthorized transactions drained 119,754 bitcoin from Bitfinex into a wallet controlled by Ilya Lichtenstein. The later Justice Department account described his intrusion into the exchange's network and his return to delete access credentials and logs. Erasing those local records could not erase the movement of the bitcoin itself. The theft created both a lost asset and a trail of transfers that would occupy investigators for years.

Lichtenstein enlisted his wife, Heather Morgan, in laundering the proceeds. The government's account distinguished his intrusion from the concealment that followed it. Fictitious identities opened accounts. Automated transactions, cryptocurrency conversions, mixing services, and movement through multiple exchanges complicated the route. Business accounts helped give some banking activity an appearance of legitimacy. Some proceeds were converted into gold coins.

The August 2023 plea announcement added a physical detail to the digital trail: Morgan concealed gold by burying it. The same announcement said that authorities had seized approximately $475 million more linked to the hack after the initial arrests. The case was not a single transfer followed by a single recovery. It involved stolen value remaining in one wallet, other portions passing through different channels, and assets changing form.

The dollar value of the stolen bitcoin changed with its market price. That fluctuation did not determine who was entitled to recovered assets. Investigators still had to locate funds and secure access. The later courts would have to distinguish the theft, the concealment of its proceeds and the competing claims to recovered property.

As of October 28, 2026: verified records establish the August 2023 money-laundering-conspiracy plea and November 2024 five-year sentence; April 2025 ruling directed asset ownership disputes into an ancillary forfeiture proceeding. Present confinement, release date, and final asset distribution are not asserted.

This excerpt and its puzzle come from the finished edition. Authoritative sources are linked below.

Follow the 10 clues.

Straight lines in any direction. Ignore spaces and accents.

0 / 10 found

On a phone, swipe sideways to see more columns. You can scroll between taps.

12345678910111213141516
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Select the first and last letter of a target.
Ready. Read the story, then find 10 words. Tap the first and last letter, or use the keyboard.
How to play · Keyboard & touch

Tap: tap the first letter, then the last. Reverse selections work too. Use Cancel selection to start again. Scroll the grid sideways between taps when needed.

Drag: choose Drag a straight line, then press, move and release on the final letter. Drag mode uses the grid for selection; switch to Tap endpoints for easier touch scrolling.

Keyboard: Tab into the grid once. Arrow keys move one cell; Home/End move to the start/end of the row. Ctrl+Home/End move to the first/last cell. Enter or Space selects the first or last letter. Escape cancels. Tab leaves the grid.

Alternative: enter the row and column of both endpoints below. A hint outlines one starting letter without counting the target as found. Progress is kept only while this page is open; reset or reload clears it.

Use row & column coordinates instead

Use the printed row and column numbers, from 1 to 16. Either endpoint order works.

First letter
Last letter

Keep the next file open

More stories.
More to discover.

Case Files: Modern True Crime — coming soon.
The book is not yet available to buy. Release details will be confirmed before orders open.

The puzzle itself runs in your browser without accounts, personal-data collection, analytics or cookies. Progress lasts only while this page is open. Source links open external websites only when you choose them.

Author mark: purple gorilla.Real stories.
Hidden words.

Source notes for this excerpt

Exact validated grid and targets from the finished book sample, modern-C06-S1. This reading activity does not introduce new evidence or solve real-world cases.

Description of the section

Use pre built sections or blocks to build your own page effortlesly.