Bitfinex lost 119,754 bitcoin to a hack on August 2, 2016. The U.S. Department of Justice seized 94,636 of them in February 2022, valued at about $3.6 billion. Bitfinex and its affiliate Tether also settled with the New York Attorney General for $18.5 million and the CFTC for $42.5 million in 2021. This page lays out each event and the communications lessons.
Originally published October 2018. Updated Oct 10, 2026.
Timeline: what happened at Bitfinex and Tether?
| Date | Event |
|---|
| August 2, 2016 | Bitfinex discloses the theft of 119,754 bitcoin, worth about $72 million at the time |
| 2016 to 2017 | Bitfinex applies a loss across user accounts and issues BFX tokens, which it later redeems |
| 2019 | The New York Attorney General opens an investigation into Bitfinex and Tether |
| 2021 | The NYAG settlement ($18.5 million) and the CFTC settlement ($42.5 million with Tether) |
| February 8, 2022 | The Department of Justice announces the seizure of 94,636 bitcoin and two arrests |
| August 2023 | Ilya Lichtenstein and Heather Morgan plead guilty to money laundering conspiracy |
| November 2024 | Lichtenstein is sentenced to five years and Morgan to 18 months |
How did Bitfinex respond to the 2016 hack?
Bitfinex responded to the August 2016 hack by spreading the loss across all customer accounts instead of declaring bankruptcy. The exchange applied a haircut of about 36 percent to user balances and issued BFX tokens as claims on future value. Bitfinex redeemed the tokens during 2017, and most holders were ultimately made whole.
The approach was controversial, but it kept the exchange operating and avoided a collapse like Mt. Gox's in 2014.
What did the 2022 federal recovery involve?
On February 8, 2022, the Department of Justice announced the seizure of 94,636 bitcoin traced to the 2016 hack, about 80 percent of the stolen amount. Prosecutors valued the seizure at about $3.6 billion at the time, which they described as the largest financial seizure in the department's history. Ilya Lichtenstein and Heather Morgan were arrested the same day.
Morgan performed under the stage name "Razzlekhan" and had published rap videos and cybersecurity articles online. That public profile pushed the case into mainstream and social media coverage. The couple pleaded guilty to money laundering conspiracy in August 2023, and in November 2024 Lichtenstein received five years in federal prison and Morgan received 18 months.
How are Bitfinex and Tether connected?
Bitfinex and Tether share common ownership through iFinex Inc. Tether issues USDT, the largest stablecoin by market capitalization. The relationship drew regulatory scrutiny because Bitfinex and Tether were linked financially.
What did the New York Attorney General find?
The New York Attorney General's office opened an investigation in 2019 over allegations that Bitfinex hid a loss of about $850 million by drawing on Tether's reserves. The 2021 settlement included an $18.5 million penalty, a bar on serving New York residents and a requirement to disclose more about Tether's reserves.
What did the CFTC allege?
The Commodity Futures Trading Commission settled with Tether in 2021 for $42.5 million over allegations that Tether made false statements about the dollar backing of USDT between 2016 and 2018. The action pushed Tether toward regular reserve disclosures.
What did the wider crypto enforcement period change?
The wider crypto enforcement period reshaped the industry after Bitfinex. FTX filed for bankruptcy in November 2022, and Sam Bankman-Fried was convicted of fraud in November 2023. Binance agreed to a $4.3 billion settlement with the Department of Justice in November 2023, and its chief executive, Changpeng Zhao, received a four-month sentence. Regulation also expanded: the European Union's Markets in Crypto-Assets rules took effect for stablecoins in 2024.
What are the communications lessons?
The Bitfinex record offers three lessons for communications teams. First, an exchange that chooses a controversial recovery plan must explain it in plain terms and keep explaining it. Second, an affiliate relationship that regulators question becomes part of the company's public record for years. Third, a vivid personal story, such as Razzlekhan's, can overtake the technical facts of a case, so teams should prepare for the version of the story that spreads fastest.
