On-chain record · medium source confidence
Bitfinex Hack Residual Movement (2021)
Roughly a fifth of the coins taken from Bitfinex in 2016 was never recovered in the 2022 seizure. In April 2021, ten months before that seizure, two addresses holding hack-linked coins were emptied. The blockchain analytics firm Merkle Science traced part of the outflow to identifiable exchanges and the remainder to addresses that have not moved since.
- First seen
- August 2016
- Connected
- October 2018
- Route display ID
5°-6491-0280Display identifier only — not proof of ownership.
2 additional population comparisons
Evidence boundary
What is — and is not — established
Attribution comes from a single commercial analytics vendor's blog, not from a court filing, and the exchanges involved are anonymised in that write-up as 'Exchange A' and 'Exchange B'. The source contains a typographical error - it prints '433,468 BTC' where the on-chain figure is 433.4689 BTC, confirmed this session via mempool.space; the companion figure of 259.74 BTC matches exactly. Both addresses are now empty. Nothing here identifies who controlled the keys in 2021.
The dossier
Evidence record
Address record
- Role
- hack-linked address emptied in April 2021, with part of the outflow traced to exchanges
- Script
- P2PKH
- Category
- Incident record
- Source confidence
- medium
- Catalog reviewed
- 2026-08-06
View all 2 documented addresses
- 01
13jE999Hssm2GFf6Yob7zGCJtf1xnPPjHd - 02
1J2Tem6ZSHnpppVhBpSq5pAZYmfjENqoD3