Bitcoin now worth $14.5 billion quietly stolen from Chinese mining pool in 2020: Arkham

Blockchain analytics firm Arkham Intelligence has uncovered a previously undisclosed theft of 127,426 BTC, now valued at nearly $14.5 billion, from Chinese mining pool LuBian in December 2020. This heist, which was worth $3.5 billion at the time, is attributed to a vulnerability in LuBian's private key generation algorithm. The attacker has reportedly not moved the stolen funds since July 2024, while LuBian had attempted to negotiate their return.

Analysis

Blockchain analytics firm Arkham Intelligence has revealed a previously undisclosed 2020 heist of 127,426 BTC from the now-defunct Chinese mining pool, LuBian. The stolen assets are currently valued at approximately $14.5 billion, but were worth $3.5 billion at the time of the theft, positioning it as potentially the largest crypto heist by dollar value when it occurred. This finding provides a new context for LuBian's abrupt disappearance in February 2021, which was previously attributed to a government shutdown. The breach, which eliminated over 90% of the pool's BTC reserves, is believed to have stemmed from a critical vulnerability in LuBian's private key generation algorithm, rendering it susceptible to brute-force attacks. Significantly, the stolen funds have reportedly remained dormant since July 2024, and LuBian still possesses 11,886 BTC (worth $1.35 billion). The historical nature of the event and the inactivity of the stolen assets mitigate immediate market price pressure, aligning with the low market impact signal, despite the strongly negative sentiment associated with such a large-scale security failure.

Key Decisions for Investors

• This event serves as a stark reminder of operational security risk; investors should rigorously assess their own key management practices and conduct heightened due diligence on the security infrastructure of any crypto custodians, exchanges, or mining pools.
• Given the historical nature of the theft and the dormancy of the stolen funds, investors should not interpret the headline value as an immediate market threat, but it is critical to monitor the attacker's addresses for any movement, as this would be a leading indicator of potential price volatility.
• The failure of a once top-ten mining pool underscores the counterparty risk in the crypto ecosystem; prioritize allocating capital and resources to platforms with long, transparent, and verifiable track records of security and operational resilience.