{"id":15994,"date":"2025-11-14T11:11:12","date_gmt":"2025-11-14T11:11:12","guid":{"rendered":"https:\/\/bitunikey.com\/news\/china-says-the-u-s-stole-lubians-127000-bitcoin-who-does-the-stash-actually-belong-to\/"},"modified":"2025-11-14T11:11:17","modified_gmt":"2025-11-14T11:11:17","slug":"china-says-the-u-s-stole-lubians-127000-bitcoin-who-does-the-stash-actually-belong-to","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/china-says-the-u-s-stole-lubians-127000-bitcoin-who-does-the-stash-actually-belong-to\/","title":{"rendered":"China says the U.S. stole LuBian\u2019s 127,000 Bitcoin \u2014 who does the stash actually belong to?"},"content":{"rendered":"<p><\/p>\n<div class=\"post-detail__content blocks\">\n<p class=\"is-style-lead\">Were the 127,000 Bitcoin seized by U.S. agents actually criminal proceeds, or did they originate from the LuBian mining pool?<\/p>\n<div id=\"cn-block-summary-block_9ab1733320e205e478f5b6962f5c6cae\" class=\"cn-block-summary\">\n<div class=\"cn-block-summary__nav tabs\">\n        <span class=\"tabs__item is-selected\">Summary<\/span>\n    <\/div>\n<div class=\"cn-block-summary__content\">\n<ul class=\"wp-block-list\">\n<li>Chinese mining pool LuBian started operations in the spring of 2020 and soon became the sixth-largest mining pool in the world. In February 2021, it ceased operation.<\/li>\n<li>Only in 2025, Arkham Intelligence found out that in December 2020, 127,272 BTC was stolen from the mining pool. This amount stood for 90% of all LuBian\u2019s bitcoins.<\/li>\n<li>Later, the Department of Justice claimed these bitcoins were forfeited from the Cambodia-based forced-labor operation Price Group.<\/li>\n<li>In January 2025, Donald Trump vowed that the U.S. would never sell its bitcoins. According to Arkham Intelligence, the U.S. currently holds 326,588 BTC, including 127,272 BTC claimed by China.<\/li>\n<\/ul><\/div>\n<\/div>\n<p><!-- .cn-block-summary --><\/p>\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\">\n<p>Table of Contents<\/p>\n<nav>\n<ul>\n<li><a rel=\"nofollow\" target=\"_blank\" href=\"#claims-coming-from-china\">Claims coming from China<\/a><\/li>\n<li><a rel=\"nofollow\" target=\"_blank\" href=\"#the-doj-report\">The DOJ report<\/a><\/li>\n<li><a rel=\"nofollow\" target=\"_blank\" href=\"#the-chain-of-events\">The chain of events<\/a><\/li>\n<li><a rel=\"nofollow\" target=\"_blank\" href=\"#do-these-bitcoins-belong-to-the-u-s\">Do these Bitcoin belong to the U.S.?<\/a><\/li>\n<\/ul>\n<\/nav>\n<\/div>\n<h2 class=\"wp-block-heading\" id=\"claims-coming-from-china\">Claims coming from China<\/h2>\n<p>In a report, amplified by <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.globaltimes.cn\/page\/202511\/1347745.shtml\" target=\"_blank\" rel=\"nofollow\">Global Times<\/a> and PANews, CVERC accuses the U.S. government of orchestrating a 2020 theft of over 127,000 bitcoins from the LuBian mining pool.\u00a0<\/p>\n<p>At the current price, these bitcoins cost over $13.1 billion, dwarfing the Bybit $1.5 billion heist conducted in March 2025. At the time of hacking, in December 2020, the stolen BTC cost over $3.5 billion, still more than in a record-breaking Bybit hack.<\/p>\n<p>Until June 2024, the funds were kept intact on the attacker addresses for four years before getting sent to the U.S.-controlled addresses. PANews <a rel=\"nofollow\" target=\"_blank\" target=\"_blank\" href=\"https:\/\/x.com\/PANews\/status\/1987485032068653292\" rel=\"nofollow\">sees<\/a> it as a pattern typical of state-backed heists. Chinese media Global Times claims that CVERC called the case a typical quarrel of thieves. Allegedly, it was the U.S. that stole the funds in 2020.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<p>The hack itself was discovered by Arkham Intelligence back in August 2025. More than that, it was known that the \u201cstolen\u201d assets ended up in the BTC wallets controlled by the U.S. government. However, CVERC was the first to claim that these bitcoins were lawfully mined by LuBian and then stolen by the U.S.-supported hackers.\u00a0<\/p>\n<p>Prior to China\u2019s accusation, a crypto sleuth, ZachXBT, alleged that someone hacked LuBian \u201cfor USG.\u201d<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">No likely someone hacked them for USG<\/p>\n<p>\u2014 ZachXBT (@zachxbt) <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/zachxbt\/status\/1978125296940253460?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">October 14, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>The U.S., however, has a strikingly different account of what happened.<\/p>\n<h2 class=\"wp-block-heading\" id=\"the-doj-report\">The DOJ report<\/h2>\n<p>Earlier, in October 2025, the U.S. Department of Justice <a rel=\"nofollow\" target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.justice.gov\/usao-edny\/pr\/chairman-prince-group-indicted-operating-cambodian-forced-labor-scam-compounds-engaged\" rel=\"nofollow\">claimed<\/a> that the entity behind the hack is a criminal organization called Prince Group, headed by Chen Zhi.\u00a0<\/p>\n<p>According to the DOJ, Price Group was involved in a wire fraud conspiracy and human trafficking. In a press release, the DOJ accused Prince Group of scamming residents of the U.S. and other countries through a \u201cpig butchering\u201d fraud scheme.\u00a0<\/p>\n<p>The DOJ indictment directly <a rel=\"nofollow\" target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.justice.gov\/usao-edny\/media\/1416266\/dl\" rel=\"nofollow\">names<\/a> LuBian as one of the money laundering operations used by Prince Group. According to the report, only 30% of the funds on LuBian addresses originated from Bitcoin mining.<\/p>\n<p>According to CVERC, preliminary findings contradicted the illegal origins of LuBian\u2019s Bitcoin.<\/p>\n<h2 class=\"wp-block-heading\" id=\"the-chain-of-events\">The chain of events<\/h2>\n<p>The LuBian Bitcoin seizure timeline may seem confusing, as the reports of the events were lagging by years. Here\u2019s the chain of events in chronological order:<\/p>\n<p><strong>April 2020:<\/strong> The LuBian mining pool mines the first bitcoins.<\/p>\n<p><strong>May 2020:<\/strong> LuBain gains a 6% share of the world\u2019s hashrate.<\/p>\n<p><strong>December 28, 2020: <\/strong>An unidentified hacker steals over 127,000 bitcoins from LuBian <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/mp.weixin.qq.com\/s\/vIg9N2xRy6o6EufAAv9uVA?scene=1&amp;click_id=2\" target=\"_blank\" rel=\"nofollow\">using brute force<\/a>.\u00a0<\/p>\n<p><strong>July 3, 2022: <\/strong>Someone (probably the LuBian rep) sent a portion of BTC to the alleged attacker\u2019s address. Using the OP_RETURN, the sender attached a text message begging the receiving party to return funds and discuss a possible reward. Several similar messages were sent in 2021\u20132024.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Each hacker address received the OP_RETURN message, shown in the screenshots, in which LuBian asks the hacker to return their funds.<\/p>\n<p>LuBian spent 1.4 BTC across 1516 different transactions to send these messages, which suggests that this is not a spoof from another hacker who\u2026 <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/t.co\/HW1P6Fanjw\">pic.twitter.com\/HW1P6Fanjw<\/a><\/p>\n<p>\u2014 Arkham (@arkham) <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/arkham\/status\/1951729795575763016?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">August 2, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p><strong>August 2023:<\/strong> The vulnerabilities in the addresses used by LuBian were mentioned by the Milky Sad researchers.\u00a0<\/p>\n<p><strong>April 2024:<\/strong> Milky Sad <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/milksad.info\/posts\/research-update-7\/\" target=\"_blank\" rel=\"nofollow\">claims<\/a> that LuBian\u2019s private keys were created via a pseudo-random number generator. The keys are so weak that it could take a gaming computer to brute force them in a matter of a few days.<\/p>\n<p><strong>June 2024:<\/strong> The \u201cstolen\u201d funds move to a new address, where most of them stay to this day.<\/p>\n<p><strong>October 14, 2025:<\/strong> The DOJ files criminal charges against Chen Zhi and Price Group and claims to conduct the biggest forfeiture in history. The U.S. reveals it seized over 127,000 BTC from Prince Group.<\/p>\n<p><strong>November 9, 2025: <\/strong>China accuses the U.S. of conducting a state-level theft of LuBian\u2019s bitcoins.<\/p>\n<h2 class=\"wp-block-heading\" id=\"do-these-bitcoins-belong-to-the-u-s\">Do these bitcoins belong to the U.S.?<\/h2>\n<p>As soon as the DOJ released the statement about the forfeiture of 127,000 BTC, various crypto influencers added this amount to the 198,000 BTC that the U.S. allegedly held at that time. The amount of 326,000 BTC aligns with the <a rel=\"nofollow\" target=\"_blank\" target=\"_blank\" href=\"https:\/\/intel.arkm.com\/explorer\/entity\/usg\" rel=\"nofollow\">findings<\/a> of Arkham Intelligence (and is mostly based on them).\u00a0<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">BREAKING: WITH 327,000 <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/hashtag\/BITCOIN?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">#BITCOIN<\/a>, THE UNITED STATES GOVERNMENT IS NOW THE 2nd LARGEST HOLDER IN THE WORLD <\/p>\n<p>THIS WILL ECHO GLOBALLY. HUGE \ud83d\ude80 <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/t.co\/DRP5kCGpFk\">pic.twitter.com\/DRP5kCGpFk<\/a><\/p>\n<p>\u2014 The Bitcoin Historian (@pete_rizzo_) <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/pete_rizzo_\/status\/1978168219383787814?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"nofollow\">October 14, 2025<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>Given that there are no publicly available official figures or an audit of the U.S. holdings, Arkham\u2019s evaluation circulates as the most precise data capturing the amount of BTC stored by the U.S.\u00a0<\/p>\n<p>However, while Trump banned the U.S. from selling its bitcoins, seized assets usually originate from crimes, and the DOJ may recommend that the government return these funds to the victims.\u00a0<\/p>\n<p>The DOJ already recommended returning 94,000 BTC stolen from Bitfinex to the exchange. The DOJ press release <a rel=\"nofollow\" target=\"_blank\" target=\"_blank\" href=\"https:\/\/www.justice.gov\/opa\/pr\/chairman-prince-group-indicted-operating-cambodian-forced-labor-scam-compounds-engaged\" rel=\"nofollow\">cites<\/a> Attorney Generals Pamela Bondi and Todd Blanche saying that \u201cthe United States will use every tool at its disposal to defend victims, recover stolen assets.\u201d<\/p>\n<p>It means that while the U.S. is probably holding 326,000 bitcoins, these coins could change their holders in the future, even despite the intention to withhold from selling Bitcoin.\u00a0<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<\/p><\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Were the 127,000 Bitcoin seized by U.S. agents actually criminal proceeds, or did they originate from the LuBian mining pool? Summary Chinese mining pool LuBian started operations in the spring&hellip;<\/p>\n","protected":false},"author":1,"featured_media":9764,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-15994","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/15994","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=15994"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/15994\/revisions"}],"predecessor-version":[{"id":15995,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/15994\/revisions\/15995"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/9764"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=15994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=15994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=15994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}