The Receipt
Ilya Lichtenstein, the architect behind the 2016 Bitfinex hack that siphoned 119,754 BTC, has been released from federal prison after serving just over one year of his five-year sentence. In a post on X late Thursday, Lichtenstein confirmed his transition to home confinement, explicitly thanking the First Step Act, a 2018 bipartisan prison reform bill signed by former President Donald Trump.
A White House official confirmed the release to CNBC, noting Lichtenstein had “served significant time” and met the criteria for early transfer under Bureau of Prisons statutes.
The Numbers
Lichtenstein’s sentence, handed down in November 2024, was originally set for 60 months. His release on January 2, 2026, marks a reduction of nearly 80%, enabled by the earned time credits and rehabilitation incentives central to the First Step Act. The stolen funds, valued at $72 million at the time of the 2016 breach, ballooned to over $10 billion by the time of his release.
The Pivot
Lichtenstein wasted no time signaling his next move. “I remain committed to making a positive impact in cybersecurity as soon as I can,” he wrote. The statement parallels the trajectory of his wife and co-conspirator, Heather Morgan (aka “Razzlekhan”), who was released in October 2025 after serving eight months of her 18-month sentence.
“To the supporters, thank you for everything. To the haters, I look forward to proving you wrong.”, Ilya Lichtenstein (@cipherstein)
Institutional Context
While Lichtenstein walks free, the disposition of the seized assets remains a critical market factor. A federal court ruled in 2025 that Bitfinex is the sole victim eligible for restitution, overriding claims from individual account holders. The exchange has committed to using 80% of the recovered assets to repurchase and burn UNUS SED LEO tokens, a deflationary mechanic that has historically acted as a price floor for the exchange’s native asset.
