A federal judge has halted the release of two individuals suspected of laundering proceeds from the 2016 Bitfinex hack.
Chief Judge Beryl Howell, of the U.S. District Court for Washington, D.C., stayed an earlier order by a New York magistrate judge to release Ilya "Dutch" Lichtenstein and Heather Morgan on bail. The two were arrested Tuesday by federal officials on charges stemming from a 2016 hack of the Bitfinex cryptocurrency exchange. The U.S. Department of Justice also said officials seized 94,000 BTC, worth over $3.5 billion at today's prices.
Inner City Press first reported the news late Tuesday. Howell's order will delay the couple's release at least until her court can review the initial order.
Prosecutors sought pretrial detention during the hearing this afternoon, arguing the pair might be a flight risk. Magistrate Judge Debra Freeman of the Southern District of New York sentenced Lichtenstein to home detention with a wearable GPS and a $5 million bond, while Morgan got the same with a $3 million bond.
The parents of both defendants were required, as a condition of the bond, to pledge their homes as collateral. The couple will spend at least Tuesday night in jail, pending an investigation by pretrial services officers.
The government initially asked for a $100 million bond, which was quickly rejected. The defense countered with $1 million, which was also rejected.
Lichtenstein must obtain signatures on his bond from five people, the judge ordered. Morgan was required to get two, which her parents agreed to provide.
Defense attorneys told the court that Morgan has health problems (including recent breast surgery) and that incarceration would be dangerous for her. She gets migraine headaches when exposed to bright lights and had to go to the hospital Tuesday after her arrest at around 7 a.m. Eastern time, her attorneys said.
According to a criminal complaint attached to the Department of Justice's press release, the two are both being charged with money laundering conspiracy and conspiracy to defraud the United States. They aren't being charged with conducting the hack itself.
An attached statement of facts further alleged that Lichtenstein and Morgan had control of a crypto wallet that held the proceeds from the 2016 hack, as well as numerous other addresses. All told, the two were allegedly in control of 2,000 different addresses and their corresponding seed phrases, which were recorded on a spreadsheet saved to a cloud storage service used by Lichtenstein.
Depending on how the case proceeds, prosecutors can seek a lighter sentence or a judge can choose to impose a below-maximum sentence. Tuesday’s hearing was intended to determine whether the defendants would be held in pretrial detention.
Defense attorneys said the defendants have “been aware” of the investigation since at least this past November after one of their service providers received a subpoena, but had not fled ahead of their arrest. That was the reason the judge said she granted bail.
Prosecutors said during the hearing that the defendants had a file on their computer titled "passport_ideas.txt” with information about obtaining passports through darknet markets.
“Here's what I'm thinking, on flight risk, the standard is a preponderance of the evidence. It's clear that the defendants have means, have traveled, and that the charges are serious. I'm troubled by the cloud-based account about passports,” Freeman said during the hearing.
One of the defense attorneys said the file was meant to open financial accounts, rather than to facilitate a flight to safety.
A plastic bag full of cellphones, labeled "burner phones," was found under the couple's bed, prosecutors said in court.
As a condition of their bond, the defendants are allowed to spend up to $10,000 a month on living expenses but they are forbidden to drain their bank accounts or make any cryptocurrency transactions, the judge said.
Another condition: The couple's cellphones and computers will be confiscated and they will be given a flip phone and one internet-connected device, monitored by pretrial services, so that they can access their bank accounts and email their lawyers.
Nikhilesh De contributed reporting.
UPDATE (Feb. 9, 00:15 UTC): Adds details from the hearing throughout.
UPDATE (Feb. 9, 03:30 UTC): Updates with stay of release order.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.