Hackers Transfer 15,959 BTC from LuBian Addresses

Funds were distributed across four wallets.

On October 22, hackers moved 15,959 BTC, valued at $1.83 billion, from the wallets of the Chinese mining pool LuBian. Analysts at Onchain Lens noted this activity.

Lubian wallets are on the move again, they transferred 15,959 $BTC worth $1.83B to 4 different wallets

· 4.999K $BTC worth $539.76M to bc1qs8
· 4.999K $BTC worth $539.76M to 3JX2dH
· 3.424K $BTC worth $369.7M to 1cpnxU
· 2.535K $BTC worth $274.36M to 1G9FZS… pic.twitter.com/Jo6k0xkmFQ

— Onchain Lens (@OnchainLens) October 22, 2025

The funds were distributed across four addresses through several transactions:

• two tranches of 4999 BTC (~$539.8 million each);
• 3424 BTC ($369.7 million);
• 2535 BTC ($274.4 million).

Activity on wallets associated with LuBian was first recorded on October 15. After three years of dormancy, 9757 BTC ($1.1 billion) were transferred from an address. Later that day, on-chain specialists noted another transfer of 2129 BTC ($238 million).

The mining pool suffered a hacking attack in 2020, though this was only discovered in 2025. During the breach, hackers withdrew 127,426 BTC. At the time, the coins were valued at $3.5 billion, now worth $14.5 billion. This theft became the largest in the history of the crypto industry.

However, experts from Arkham Intelligence and Elliptic previously suggested that the attack might not have occurred. On October 14, U.S. authorities announced plans to confiscate the funds stolen from LuBian as part of an investigation into the Prince Group, a criminal organization based in Cambodia.

The U.S. Department of Justice described the mining pool as a company used by the group for money laundering. Thus, analysts speculated that the hack might have been staged.

Earlier, ZachXBT uncovered a scheme involving the theft of 1.2 million XRP, valued at $3 million, from an inexperienced user’s wallet.