Malone Lam Convicted in $245 Million Crypto Heist
A 22-year-old mastermind has been convicted for orchestrating a $245 million cryptocurrency theft ring. The operation utilized social engineering and complex laundering methods.
Malone Lam pleaded guilty to a RICO conspiracy charge in the United States Federal District Court for Washington DC. He is the eleventh individual convicted in this case. Seven other defendants remain charged.
The criminal enterprise stole and laundered assets valued at more than $245 million between 2023 and 2025. Lam was arrested in September 2024. Judge Alicia O. Valle noted that the evidence resembled a fictional character from a 1986 film.
Recruitment via Gaming Platforms
Most gang members were between 18 and 20 years old. They recruited each other through online gaming platforms. Members were based in California, Connecticut, New York, Florida, and overseas.
The group assigned specific roles to each member. Some acted as database hackers to identify potential victims. Others purchased stolen data from the Dark Web. The team also targeted individuals through social media and crypto forums.
Social Engineering Tactics
Coconspirators contacted victims posing as security specialists. They used social engineering to manipulate targets into revealing sensitive information. Victims provided passwords, private keys, and seed phrases.
This access allowed the group to empty cryptocurrency wallets. In one physical instance, member Marlon Ferro burglarized a victim's home. He stole a portable hard drive containing the digital wallet. Ferro received a 78-month prison sentence in May 2026.
Complex Money Laundering Methods
The laundering process was more complex than the initial theft. The group used mixers to pool and redistribute funds. They moved assets through multiple exchanges to disguise the origin.
Peel chains and pass-through wallets fragmented the transactions. Virtual private networks hid the IP addresses and locations of the operators. GN markets/crypto (en-US) reports that these methods aimed to prevent blockchain tracing. The funds were eventually converted to cash.
