Hacker still holds $14 billion in stolen Bitcoin from massive 2020 LuBian attack: Arkham
Key Takeaways
- A hacker stole 127,426 Bitcoin from Chinese mining pool LuBian in December 2020, now valued at over $14.5 billion.
- Lubian abruptly stopped operations without an explanation two months after the hack.
Share this article
A massive theft of 127,426 Bitcoin (BTC) from the secretive Chinese mining pool LuBian in 2020, which was uncovered today, has sparked concerns in the crypto community as the hacker still holds the entire stash more than four years after the incident.
The stolen BTC stash, worth $3.5 billion at the time, is now valued at over $14 billion, according to a new report from Arkham Intelligence.
It is not only the biggest crypto heist in history but also one of the longest-concealed cases. LuBian, which controlled nearly 6% of Bitcoin’s network hash rate in May 2020, has never publicly disclosed the breach.
Inside the largest crypto heist
As traced by Arkham, the hack occurred on December 28, 2020, with more than 90% of LuBian’s BTC holdings being drained. Arkham suggests that LuBian used an insecure algorithm to generate private keys, which made them vulnerable to brute-force attacks.
The day after the attack, a LuBian-linked address lost an additional $6 million in Bitcoin and USDT on the Bitcoin Omni layer.
On December 31, LuBian moved its remaining 11,886 Bitcoin, currently worth about $1.3 billion, to recovery wallets.
After the hack, the firm broadcast messages across 1,516 Bitcoin transactions requesting the return of stolen funds, spending 1.4 Bitcoin in the process.
The hacker’s stash of 127,426 BTC remains untouched since a wallet consolidation in July 2024, while LuBian’s holdings sit at 11,886 BTC. The unknown exploiter has climbed to 13th place among the top BTC holders, outranking the infamous Mt. Gox hacker.
LuBian stopped mining in early 2021
The hack may explain why LuBian quietly disappeared from the Bitcoin network in early 2021. Given the firm’s secretive operations, it’s perhaps no surprise that the former top-tier miner chose to vanish rather than disclose a breach of this scale.
According to data from mempool.space, Lubian’s last known mining activity occurred on March 1, 2021, when it mined Bitcoin block 672,636.
At the time, industry observers speculated the halt was linked to China’s and Iran’s clampdown on crypto mining. Those regions were believed to be Lubian’s active areas.
China announced a crackdown on Bitcoin mining and trading in May 2021, followed by several provinces ordering shutdowns of mining operations through June.
By September 2021, Chinese authorities issued a nationwide notice declaring crypto mining an “obsolete” industry, effectively enacting a total ban on both mining and trading.
Share this article
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Fed Voting Member Harker: Fighting Inflation Requires Faster, More Frequent Small Rate Adjustments, Be Vigilant Against Inflation Expectations Becoming Entrenched
Cleveland Federal Reserve President Loretta Mester believes that inflation pressures have spread beyond the energy sector, with AI investments and tariffs driving up costs. To prevent high inflation from becoming entrenched in the economy, she suggests that the Federal Reserve should consider smaller, quicker, and more frequent rate adjustments, rather than waiting for inflation pressures to accumulate and then taking larger actions. She did not explicitly support an interest rate hike in October, emphasizing policy transparency: explaining the response mechanism does not equate to committing to a specific rate path.
Will the US cancel 20-year Treasury bonds? BNP Paribas: It may trigger market panic; Citibank: Positioning 20-year bonds to outperform 10-year bonds
There are market rumors that the U.S. Treasury is considering cutting back or canceling the issuance of 20-year Treasury bonds, which were reinstated in 2020. The yield on 20-year bonds has long been higher than both 10-year and 30-year bonds, resulting in a "hump" in the yield curve and higher financing costs. The market is closely watching this Friday’s routine survey questionnaire, as well as whether a clear signal will be released in the quarterly refunding statement on November 4. Citi suggests positioning in advance, but BNP Paribas warns that such a move could be interpreted as a panic signal that policy tools have been exhausted.

Bitcoin price volatility accompanies a 6% drop as sentiment turns neutral