Curriculum·J311 Privacy, Surveillance, and Compliance Exposure·about 33 min
You are being watched, and so is everyone
By the end of this lesson you can
- →Distinguish pseudonymity from anonymity, and name the event that converts one into the other
- →Explain why a public ledger improves in resolution over time rather than decaying
- →Compute what a laundering effort has to achieve to succeed, and why the arithmetic runs against it
- →Identify the three linking events that connect an address to a person
Junior · enrolled learners
This lesson opens with The Bitfinex laundering, 2016 to 2022.
- What happened
- In August 2016 Ilya Lichtenstein breached Bitfinex and initiated more than 2,000 unauthorized transactions moving 119,754 BTC, worth roughly $71M at the time, to a wallet he controlled. Over the following years he and Heather Morgan laundered the proceeds through fictitious identities, automated layering into thousands of transactions, deposits into accounts at darknet markets including AlphaBay, mixing services including Bitcoin Fog and Wasabi, chain hopping, conversion into Monero, gold coins later buried in California, and cash obtained through intermediaries. In February 2022 the Department of Justice seized 94,636 BTC, about $3.6B at the time and the largest seizure in US history to that date. Lichtenstein was sentenced to 60 months on 14 November 2024 and Morgan to 18 months on 18 November 2024.
- The decision point
- This was not a careless effort. It used most of the techniques that exist, layered on top of each other, run by someone technically capable, over more than five years. The record it was hiding in never expired, never degraded and was available to anybody who wanted to work on it, for as long as they wanted. Laundering has to succeed at every technique for the entire remaining life of the record. Analysis has to succeed once.
- Recorded loss
- $3,600,000,000
What you will be able to answer
- →Pseudonymous or anonymous?
- →What converts pseudonymity into identity?
- →Why does the record improve rather than decay?
- →What is the asymmetry?
Orientation and Year One are open: anyone can read them without an account. From Year Two onward the lessons are for enrolled learners, because progress through the later years only means anything if it is tracked against a record.
It is free. We do not sell the list and there is nothing to buy at the end of it.
Sources and review
- https://www.trmlabs.com/resources/blog/ilya-lichtenstein-sentenced-for-role-in-bitfinex-hack-in-razzlekhan-case-as-government-recovers-about-10-billion-in-stolen-funds
- https://www.cnbc.com/2024/11/14/bitfinex-hacker-sentenced-to-five-years-in-prison-for-bitcoin-money-laundering-scheme.html
- https://www.dhs.gov/hsi/news/2024/11/20/bitfinex-hacker-sentenced-money-laundering-conspiracy-involving-billions-stolen
- https://www.chainalysis.com/blog/address-poisoning-scam/
Confidence high·Volatility low·Reviewed 2026-08-06·Owner unassigned
Contested
The survival model in part three is an illustration with stated assumptions, not an estimate. Nobody publishes a per-technique annual failure rate and the curriculum does not invent one. What the arithmetic demonstrates is the shape of the problem, which is that a conjunction of requirements held over many years falls fast, and that shape does not depend on the numbers chosen.
F106-04 and F106-05 own being a target and how target lists are assembled. This lesson owns the ledger as a surveillance surface and the linking events that attach an address to a person. Keep the split and do not re-derive target selection here.