- Ilya Lichtenstein says the First Step Act helped his early release and he is now on home confinement under Bureau of Prisons rules.
- DOJ seized about $3.6B in bitcoin tied to the 2016 Bitfinex hack and Lichtenstein had received a five-year sentence.
Bitfinex hacker Ilya Lichtenstein has re-entered public life after announcing that he left prison early, a little over a year into a five-year sentence for his role in the 2016 Bitfinex breach. In a post shared on X, he said that the First Step Act, a criminal justice reform law signed during Donald Trump’s first term, allowed him to qualify for earlier release based on earned credits. He also promised to return to work in cybersecurity, thanked people who supported him through the case and told critics that he intends to prove them wrong over time. His comments immediately revived debate about how much leniency convicted cybercriminals should receive and whether the law that helped him fits the seriousness of the Bitfinex hack. At the same time, officials stressed that they handled his case within existing rules. A spokesperson said that he had already served a significant portion of his 60-month sentence and now lives under home confinement, which matches Bureau of Prisons policy for some inmates who earn credits or complete programs under the First Step Act. The statement did not say that Trump or his current administration stepped in personally, which leaves the legal reform itself, rather than direct political intervention, at the center of the story.
Bitfinex hacker Ilya Lichtenstein and Trump’s First Step Act
In his Thursday evening message, Bitfinex hacker Ilya Lichtenstein explicitly thanked Trump’s First Step Act and linked his freedom to that 2018 law.
The First Step Act allows federal prisoners who meet certain criteria to earn time credits through education, work and rehabilitation programs, which can then count toward earlier placement in halfway houses or home confinement. According to coverage of the case, officials say that Lichtenstein accumulated enough credits to move out of a secure facility and into supervised release at home, although he still serves the remainder of his sentence under strict conditions. The law itself predates his conviction by several years. Trump signed it in December 2018, and it has reshaped the way many non-violent and white-collar federal cases progress toward release. In this situation, the law intersected with a high-profile cybercrime involving bitcoin stolen from a major exchange, which makes the result especially visible. Supporters of sentencing reform point to the case as proof that rules apply even when a defendant sits at the center of a headline-grabbing heist. Critics argue that someone who admitted to stealing and laundering billions in cryptocurrency should have remained behind bars longer, regardless of available credits, because of the scale of the offense.
Sentencing, home confinement and early release timeline
The story of Bitfinex hacker Ilya Lichtenstein does not start with his X post or even with his sentencing. Authorities arrested him and his wife, entrepreneur and rapper Heather Morgan, in February 2022 and seized bitcoin then worth about 3.6 billion dollars, which investigators linked to the 2016 Bitfinex hack. The couple faced money laundering conspiracy charges after agents decrypted a file in his cloud storage that contained wallet addresses and private keys tied to nearly 120,000 stolen bitcoin. In August 2023, Lichtenstein admitted that he had not only helped launder the funds but had also carried out the attack on Bitfinex. In November 2024, a federal judge sentenced him to 60 months in prison and three years of supervised release. Morgan received an 18-month sentence and an identical period of supervision for her role in helping disguise the source of the funds and move them through various accounts. Netflix later released the documentary “Biggest Heist Ever” on 6 December 2024, which followed the couple’s rise, their unusual online personas and the investigation that caught them. Despite the five-year term, reports now say that Bitfinex hacker Ilya Lichtenstein spent a little over a year in a prison facility before moving to home confinement. Officials describe that step as consistent with the First Step Act and other Bureau of Prisons rules, which allow qualifying inmates to serve a significant portion of their sentence under supervision outside a traditional prison. They did not claim that the Trump administration or any political figure ordered a special exception in his case, and they emphasized that he remains under restrictions rather than fully free.
Bitfinex hacker Ilya Lichtenstein and the 2016 Bitfinex breach
The controversy around the early release only makes sense when seen against the original crime. In August 2016, Bitfinex, a large Hong Kong-based cryptocurrency exchange, announced that attackers had exploited its systems and removed 119,756 bitcoin from customer wallets. At the time, that amount equaled around 71 to 72 million dollars in value, but as bitcoin’s price rose over the following years, the stash grew to be worth close to 4.5 billion dollars at its peak. Investigators say that Bitfinex hacker Ilya Lichtenstein split the stolen coins across more than two thousand addresses and began moving small portions through darknet marketplaces such as AlphaBay and later Hydra to disguise their origin. After law enforcement took down those markets, logs and other digital traces helped authorities map the flow of funds. A search warrant for his cloud accounts led agents to a spreadsheet containing wallet keys for the stolen bitcoin, which opened the door for the 3.6-billion-dollar seizure in 2022 and for the charges that followed. For Bitfinex customers, the breach left long-lasting marks. The exchange initially spread losses across accounts, cutting balances by about 36 percent and issuing BFX tokens that later converted to either cash redemption or equity in its parent company. Many customers spent years tracking recovery efforts and watching courts decide how to handle the remaining seized coins. The fact that Bitfinex hacker Ilya Lichtenstein now speaks about returning to cybersecurity work adds another emotional layer for people who lost funds or trust during that period.
Media image of Bitfinex hacker Ilya Lichtenstein and Heather Morgan
Even before his early release, Bitfinex hacker Ilya Lichtenstein had become a central character in popular coverage of crypto crime. His wife, Heather Morgan, used the stage name “Razzlekhan” for eccentric rap videos and performance art, which journalists quickly connected to the couple’s private life and the case. Their arrest in 2022 sparked headlines that framed them as “Bitcoin Bonnie and Clyde” and set up the narrative arc for Netflix’s true-crime documentary. The Netflix film “Biggest Heist Ever” pushed that image even further by replaying old footage, reconstructing key moments in the investigation and tracking how the stolen bitcoin ballooned in value from tens of millions of dollars to several billion. After the release, Morgan’s lawyers sent cease-and-desist letters to Netflix and producers, arguing that the documentary misrepresented parts of her story and invaded the privacy of people shown in wedding scenes. She has also spoken publicly about her sentence of 18 months, her early release from prison and plans to continue creative projects while pushing back against what she calls unfair media portrayals. Now the couple’s image shifts again. Morgan replied to her husband’s announcement post with a photo of the two together, signaling that they remain close despite time apart in custody. At the same time, critics inside and outside the crypto sector question whether early home confinement sends the right message about deterrence for large hacks. Supporters argue that the skills of Bitfinex hacker Ilya Lichtenstein could be redirected toward security research and that effective rehabilitation can benefit the broader ecosystem if carefully supervised.
Conclusion
The early release of Bitfinex hacker Ilya Lichtenstein brings together criminal justice reform, high-stakes cybercrime and the still-unfolding history of the 2016 Bitfinex hack. He entered the case as the person who admitted to stealing 119,756 bitcoin, worth about 72 million dollars at the time and several billion at later prices, and he left court in 2024 with a 60-month prison term and years of supervision ahead. Thanks to the First Step Act and the credits he earned, he now serves part of that time at home rather than in a prison facility, while officials insist that they followed standard policy rather than granting a special favor. His X post, where he thanked Trump’s law, promised constructive work in cybersecurity and addressed both supporters and critics, marks the start of a new chapter rather than the end of the story. Victims of the hack, observers of sentencing reform and people across the crypto industry will now watch what Bitfinex hacker Ilya Lichtenstein actually does with the relative freedom that home confinement brings. His future choices will shape how this case appears in histories of bitcoin, in debates about digital crime and in discussions about how far criminal justice reform should go for people behind one of the most famous hacks in the sector.
Disclaimer
The information provided in this article is for informational purposes only and should not be considered financial advice. The article does not offer sufficient information to make investment decisions, nor does it constitute an offer, recommendation, or solicitation to buy or sell any financial instrument. The content is opinion of the author and does not reflect any view or suggestion or any kind of advise from CryptoNewsBytes.com. The author declares he does not hold any of the above mentioned tokens or received any incentive from any company.
Featured image created by AI
