Ilya Lichtenstein, the hacker responsible for the 2016 Bitfinex Bitcoin theft, has been released from prison more than three years ahead of schedule, citing sentence reductions earned under a US criminal justice reform law passed during Donald Trump’s first term.
In a post shared on X, Lichtenstein said his early release was made possible by the First Step Act, a bipartisan law enacted in 2018 that allows inmates to reduce their sentences through rehabilitation credits and good behavior. He added that he plans to redirect his technical skills toward cybersecurity work.
Related reporting: Santiment sees upbeat crypto chatter as 2026 begins
Lichtenstein had been sentenced in November 2024 to five years in prison after pleading guilty to laundering funds connected to the Bitfinex hack, one of the largest crypto thefts in history. The breach saw nearly 120,000 Bitcoin stolen at a time when the asset was worth roughly $70 million, though its value later ballooned into the billions.
Morgan posts a photo of the couple after Lichtenstein’s release. Source: Heather Morgan
A high-profile crypto crime that took years to unravel
The case drew global attention not only because of the scale of the theft, but also due to how long it took law enforcement to track down those responsible. Lichtenstein and his wife, Heather Morgan, were arrested in 2022 after US authorities seized a large portion of the stolen Bitcoin following a complex, multi-year investigation.
Their story later entered pop culture through a Netflix documentary and an upcoming feature film, underscoring how deeply the case resonated beyond crypto circles.
During sentencing, Lichtenstein admitted to carrying out the hack and orchestrating an elaborate laundering scheme involving thousands of transactions. He argued that Morgan, who was charged separately for her role in laundering the funds, had no involvement in the original breach and was unaware of the hack for years. Morgan ultimately received an 18-month sentence and was released earlier in 2025.
Victims and restitution remain unresolved
While thousands of users were affected by the 2016 breach, court filings suggest that Bitfinex itself may be the only party legally eligible for restitution. In late 2024, US prosecutors asked victims to submit impact statements, though it remains unclear how recovered funds will ultimately be distributed.
The case continues to raise questions about accountability, victim compensation, and how justice is applied in large-scale crypto crimes, especially as recovered assets have appreciated dramatically since the original theft.
Trump-era clemency signals renewed scrutiny of crypto cases
Lichtenstein’s release comes amid renewed attention on crypto-related prosecutions and pardons under President Donald Trump. In recent comments, Trump said he would review the case of Keonne Rodriguez, a co-founder of the privacy-focused Samourai Wallet, suggesting further clemency could be considered.
Trump has already taken high-profile action in similar cases. He granted a presidential pardon to Ross Ulbricht, the founder of the Silk Road marketplace, and later pardoned Changpeng Zhao, the former CEO of Binance, moves that reignited debate over enforcement priorities in the digital asset space.
As regulators and lawmakers reassess how crypto activity fits into existing legal frameworks, Lichtenstein’s early release adds another chapter to the evolving intersection of digital finance, criminal justice, and political discretion.