Ilya Lichtenstein, previously convicted in connection with the 2016 Bitfinex cryptocurrency hack, has announced his early release from prison. Lichtenstein, who pleaded guilty to money laundering charges, stated his release was facilitated by the First Step Act, a U.S. federal law enacted in 2018. His projected release date, according to the Federal Bureau of Prisons, was February 9, 2026, indicating his departure aligns with earlier than anticipated legal outcomes.
Lichtenstein shared his news on social media platform X last week, expressing a commitment to contribute positively to the cybersecurity field. He also extended gratitude to his supporters and declared his intention to disprove his critics. The Bitfinex hack, one of the largest cryptocurrency thefts in history, involved the unauthorized transfer of over 119,000 bitcoin from the exchange, valued at approximately $71 million at the time of the 2016 breach.
Ilya Lichtenstein’s Early Release and the Bitfinex Case
Ilya Lichtenstein’s early release marks a significant development in the aftermath of the 2016 Bitfinex hack, a case that has reverberated through the cryptocurrency and financial crime landscape. Lichtenstein and his wife, Heather Rhiannon “Razzlekhan” Morgan, were arrested in February 2022 after a lengthy investigation. In 2023, both individuals entered guilty pleas to charges related to their involvement in laundering the stolen funds.
The couple’s scheme unraveled following the purchase of Walmart gift cards using a portion of the stolen bitcoin. These gift cards were reportedly redeemed via Walmart’s iPhone application under an account registered in Morgan’s name. This seemingly mundane transaction provided law enforcement with a critical link to trace the illicit cryptocurrency back to the perpetrators.
Lichtenstein was sentenced to five years in prison in November 2024. His wife, Morgan, received a sentence of 18 months shortly thereafter. Morgan also confirmed her release in late October 2025, describing her prison experience as “chill enough.”
Blockchain intelligence firm TRM Labs detailed how Lichtenstein exploited a vulnerability within Bitfinex’s multi-signature withdrawal system. This exploit allowed him to authorize transactions without the necessary approvals from BitGo, the third-party digital asset trust company responsible for safeguarding Bitfinex’s funds. The stolen bitcoin was subsequently moved through various cryptocurrency conversions and mixing services, such as Bitcoin Fog, to obscure its origin.
The Impact of the First Step Act
The First Step Act, championed by the Trump administration, is a bipartisan piece of legislation aimed at reforming the U.S. federal justice system. A key component of the act involves the establishment of a “risk and needs assessment system.” This system is designed to evaluate an inmate’s likelihood of recidivism and to facilitate early release for individuals who demonstrate rehabilitation and a reduced risk to society.
A spokesperson for the Trump administration informed CNBC that Lichtenstein “served significant time on his sentence and is currently on home confinement consistent with statute and Bureau of Prisons policies.” This statement indicates that Lichtenstein’s early release adheres to the provisions and guidelines set forth by the First Step Act and the Bureau of Prisons.
The recovery of a substantial portion of the stolen assets represented a significant victory for law enforcement. Authorities managed to seize approximately 94,000 bitcoin, which were valued at around $3.6 billion at the time of their recovery in 2022. This seizure stands as one of the largest in U.S. history. In January 2025, U.S. prosecutors filed a motion requesting the return of these recovered assets to Bitfinex, signaling the final stages of the legal process concerning the stolen funds.
Future Outlook and Next Steps
With Lichtenstein released early and his wife already out of incarceration, the focus now shifts to their stated intentions of engaging with the cybersecurity sector. The outcome of their planned contributions and the broader implications for financial crime investigations in the cryptocurrency space will be closely watched. The legal proceedings regarding the return of the seized bitcoin to Bitfinex are ongoing, with a decision anticipated following the prosecution’s motion filed in January 2025. The eventual disposition of these funds will be a key indicator of the final resolution of the Bitfinex hack case.