Malone Lam, 22, has pleaded guilty in a U.S. case tied to the theft of 4,100 bitcoin and a total of $245 million in stolen cryptocurrency, according to the Department of Justice, which said he led an international crime group that targeted crypto users through hacked data and social engineering.

The Justice Department said Lam and his associates operated from October 2023 to at least May 2025, using hacked databases to obtain crypto users’ personal information and then deceiving victims into handing over account credentials and private keys. Prosecutors said the group stole 4,100 bitcoin in one case, valued at more than $230 million at the time, while the total value of stolen cryptocurrencies in the broader scheme reached $245 million.

Authorities said the operation went beyond online fraud. In one incident described by the DOJ, a co-defendant broke into a residence in New Mexico to steal a hardware wallet while Lam monitored the victim through a hacked iCloud account. U.S. Attorney Jeanine Ferris Pirro said the group invaded victims’ privacy and stole hundreds of millions of dollars in digital assets through social engineering and home break-ins.

Prosecutors said Lam and his co-defendants laundered the stolen bitcoin and spent proceeds on luxury goods, nightlife, and real estate in Los Angeles, the Hamptons, and Miami. The DOJ said some spending reached as much as $500,000 in a single night. Lam was arrested in 2024 at a rental home in Miami.

Different sources describe the matter differently, and the relevant details still require official confirmation.

The case adds to a growing body of enforcement actions focused on crypto thefts that combine digital intrusion with impersonation and real-world coercion. Based on the information disclosed so far, the plea does not resolve all questions around the roles of other participants or the full path of the stolen funds.

Why It Matters

This case stands out because it combines several of the most persistent risks in crypto at once: compromised user data, social engineering, attacks on self-custody, and laundering of stolen assets after the breach. For the industry, it is a reminder that large losses do not always begin with smart contract exploits or exchange hacks; they can start with compromised personal information and targeted deception.

It also underscores how crypto-related crime enforcement is increasingly crossing digital and physical boundaries. That raises the stakes for exchanges, wallet providers, and users alike, especially where account security, identity verification, cloud backups, and hardware wallet storage intersect.