{"id":24951,"date":"2022-08-04T20:11:40","date_gmt":"2022-08-04T20:11:40","guid":{"rendered":"http:\/\/egrowonline.com\/?p=24951"},"modified":"2022-08-04T20:11:40","modified_gmt":"2022-08-04T20:11:40","slug":"meet-the-guy-uncovering-cryptos-biggest-thefts","status":"publish","type":"post","link":"http:\/\/egrowonline.com\/?p=24951","title":{"rendered":"Meet the guy uncovering crypto&#8217;s biggest thefts"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Ian Balina was reviewing initial coin offerings, the crypto industry\u2019s equivalent of an initial public offering, live on YouTube in 2018 when a hacker emptied around $2 million worth of cryptocurrency from one of his wallets. It may have been his old college email address that he used as a backup to another account that made him vulnerable. His bravado about his accumulated wealth likely didn\u2019t help.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">When a viewer noted in the comments that his wallet had emptied, Balina said he thought he was being trolled. But he checked and saw that the funds had vanished, he later said in a <a target=\"_blank\" href=\"https:\/\/www.youtube.com\/watch?v=-y_r3Yg56jI\" rel=\"noopener\">YouTube video<\/a> detailing the hack.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">It was a humiliating mistake for a prominent crypto evangelist who <a target=\"_blank\" href=\"https:\/\/tokenmetrics.com\/gift-crypto-investing-guide\" rel=\"noopener\">wrote the book<\/a> on crypto investing. But these fumbles aren\u2019t unusual, particularly for the uninitiated who might store their wallet keys poorly or send crypto to fake investors who promise them tempting but unrealistic returns. Once the crypto is gone, they have little recourse to recover their investment other than calling people like Richard Sanders.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Sanders is the kind of guy you seek when <a target=\"_blank\" href=\"https:\/\/knowyourmeme.com\/memes\/all-my-apes-gone\" rel=\"noopener\">all your apes are gone<\/a>. He and his company, <a target=\"_blank\" href=\"https:\/\/cipherblade.com\/\" rel=\"noopener\">CipherBlade<\/a>, investigate digital thefts of $100,000 or more and other online crimes by scouring blockchains, or digital public ledgers that record every transaction and change-of-hands cryptocurrencies make.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Sanders specializes in blockchain forensics. He took on the Balina case and followed a group of teen hackers to a Discord channel. He joined it, pretending to be a 19-year-old woman, gained their trust, and ultimately learned how they carried out the scheme. (Balina did not respond to a request for comment about where his case stands now and what role CipherBlade played, but he said <a target=\"_blank\" href=\"https:\/\/www.youtube.com\/watch?v=1t-9SUYBVtw\" rel=\"noopener\">on YouTube in 2021<\/a> that the hackers had been caught. The FBI did not respond to a question regarding criminal charges related to the case.)<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">CipherBlade is the closest thing to 911 the cryptoworld has. The schemes Sanders and his investigators uncover can be fraudulent investments run by people posing as crypto traders or wallet hacks and breaches on cryptocurrency exchanges\u2014easy money handed to thieves by lax storage of wallet keys. But there are also romance scams, embezzlements, ransomware attacks, and blackmail, where people get others to willingly shell out crypto and then run off with the loot. There are also soon-to-be ex-spouses hiding money from one another in crypto.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Sometimes, Sanders\u2019s work is clearing the names of crypto exchanges that are accused of money laundering. At others, it\u2019s following money on the blockchain used for crimes as devastating as human trafficking. In the new world of digital wealth, riffs on classic crimes flourish. The calamitous difference for victims, though, is that government investigators have been largely ill-equipped to dig into these scams, and the decentralized nature of crypto means there\u2019s no institutionalized protection for investments.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">US consumers lost more than $1 billion in cryptocurrencies to fraudsters between January 2021 and March 2022, according to the <a target=\"_blank\" href=\"https:\/\/www.ftc.gov\/news-events\/news\/press-releases\/2022\/06\/new-analysis-finds-consumers-reported-losing-more-1-billion-cryptocurrency-scams-2021\" rel=\"noopener\">Federal Trade Commission<\/a>, and $14 billion was stolen worldwide in 2021, according to <a target=\"_blank\" href=\"https:\/\/blog.chainalysis.com\/reports\/2022-crypto-crime-report-introduction\/\" rel=\"noopener\">Chainalysis<\/a>, a leading blockchain data platform. In February, the FBI launched a virtual assets unit, and in May, the SEC said it would nearly double the size of its Crypto Assets and Cyber Unit, reaching a grand total of 50. Officials have seized more stolen crypto than they can manage, and the federal government in 2021 had to <a target=\"_blank\" href=\"https:\/\/www.vox.com\/recode\/2021\/7\/30\/22600574\/cryptocurrency-bitcoin-ethereum-asset-seizure-crimes-bank-storage-password-department-of-justice\" rel=\"noopener\">contract a bank <\/a>capable of storing and liquidating the assets. <\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">But even that very bank, Anchorage Digital, later came under fire for failing to follow anti-money laundering regulations. In the tangled web of blockchains, government investigations move slowly. Federal agents take on crypto scams as just a subset of the broad range of thefts they investigate. Sanders\u2019s operation, which includes nine people, is far more nimble.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Even a blockchain sleuth has limitations. As a private enterprise, CipherBlade lacks subpoena power. Sanders can\u2019t go rogue and facilitate the return of money. Instead, he\u2019s a new kind of go-between, a private investigator for the growing number of people who are losing wealth in crypto.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">\u201cWe basically hand these cases to law enforcement on a silver platter,\u201d he told Morning Brew. \u201cWe say, \u2018We have done everything for this individual shy of doing things that we don\u2019t have the legal power to do.\u2019\u201d<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Government officials have been slower to catch up, but they are getting better at investigating and prosecuting crypto cases. In February 2022, officials <a target=\"_blank\" href=\"https:\/\/www.justice.gov\/opa\/pr\/two-arrested-alleged-conspiracy-launder-45-billion-stolen-cryptocurrency\" rel=\"noopener\">announced<\/a> the FBI\u2019s largest seizure ever: $3.6 billion related to a 2016 hack of the virtual currency exchange Bitfinex. Many associate bitcoin with anonymity; the very online couple behind the money laundering in that scam, Heather Morgan and Ilya Lichtenstein, showed the world how untrue that was. <\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">It\u2019s highly traceable, especially for experts like Sanders, and that makes finding criminals even easy in some cases. Wallets seem anonymous, but after a heist, people will often want to convert crypto to cash. This is usually done on major exchanges that require KYC, or know your customer, regulations that mandate people supply identifying info. But even with added attention, law enforcement can\u2019t bring all the crypto scammers to justice.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">\u201cAs [much as] law enforcement is going to increase the amount of resources that it\u2019s going to devote to this issue, it\u2019s never going to catch up,\u201d said Tal Lifshitz, an attorney who focuses on cryptocurrencies and digital assets. \u201cThere\u2019s always going to be a space for private investigators, private lawsuits, and litigation to fill in the gaps for the cases that the government is just not going to pursue.\u201d<\/p>\n<\/div>\n<div id=\"inline-subscribe\" class=\"style__Container-sc-6fdcc87e-0 style__RoundedContainer-sc-6c630ac0-0 iRBZvG igYhOA\">\n<h5 class=\"sc-iqcoie hnpBjB inline-subscribe\">Become smarter in just 5 minutes<\/h5>\n<p class=\"sc-iqcoie dPCGCY inline-subscribe\">Get the daily email that makes reading the news actually enjoyable. Stay informed and entertained, for free.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Cue people like Sanders. He started as an enthusiast and has grown to a full-time investigator. The 32-year-old isn\u2019t some pseudonymous online persona. From his home office in Pittsburgh, he talks fast, detailing complicated crypto scams\u2014and how not to become a victim who needs to hire him. This is where he digs into scams and crimes from around them the globe. (He\u2019s also a devoted Swiftie, and his office doubles as a dance floor when he takes breaks from analyzing blockchains to dance to \u201cShake It Off\u201d. )<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Former military, Sanders said he enlisted in the Army at 17 and served in Iraq and Afghanistan. He went on to work in psychological operations for the Army. That\u2019s where he learned to find \u201cunconventional solutions to unconventional problems,\u201d he said, a skill that translates to hunting down crypto on blockchains. \u201cThere was no playbook for these types of investigations. We have made the playbook.\u201d<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Sanders won\u2019t say exactly how he got into blockchain forensics and learned to scour the web for these transactions. There\u2019s no direct pipeline to this kind of work. But he did say he started CipherBlade in 2017 after helping some friends in the crypto world who had been hacked or scammed. Word spread, and Sanders had more work than he could manage as a solo blockchain enthusiast, he said. <\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">CipherBlade now boasts connections to Chainalysis and other big investigative players in the blockchain world, and has been contracted by the US government to serve as an expert witness (it\u2019s <a target=\"_blank\" href=\"https:\/\/www.usaspending.gov\/recipient\/f66117a5-cb1e-ecf0-3c9d-afd3558575e4-C\/latest\" rel=\"noopener\">one<\/a> of several companies to which the government has cumulatively paid out <a target=\"_blank\" href=\"https:\/\/www.usaspending.gov\/search\/?hash=bf2915feca9edb1e499d24cc1072a880&amp;utm_source=Sailthru&amp;utm_medium=email&amp;utm_campaign=Recode%2005.11.2022&amp;utm_term=Recode\" rel=\"noopener\">millions<\/a> of dollars to investigators. The case Sanders was hired for is ongoing, and he declined to elaborate on its nature until it closes).<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">In addition to hackers, Sanders said his firm investigates civil cases, like divorce proceedings where a spouse has hidden cash by investing in cryptocurrency. There are also romance scams that climb into the six-figure range. Sanders said he has received reports from people seeking his investigative skills, but can\u2019t help them if they don\u2019t want the authorities involved; for instance, if they are concerned about having committed tax evasion. <\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">\u201cBottom line is this: We are not a rogue agency\u2026we operate within the limits of the law,\u201d Sanders said.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">But it\u2019s not just about chasing wealth for people who forgot to lock up their wallets. Sanders works with the nonprofit <a target=\"_blank\" href=\"https:\/\/followmoneyfightslavery.org\/about\/team\/\" rel=\"noopener\">Anti-Human Trafficking Intelligence Initiative<\/a>. He looks at the wallet addresses the initiative has scraped from the dark web and analyzes them, seeking links to crypto exchanges, like Coinbase. Then, law enforcement can use that information to subpoena identifying information to make arrests of buyers and traffickers. <\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">The impeccable nature of the blockchain\u2019s record-keeping brings new light to perpetrators of crimes like these. Instead of using bitcoin to buy and sell exploited material anonymously, people are often leaving paper trails.<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">\u201cWhen it comes to blockchain analysis, it\u2019s not just about going after these pots of gold of hundreds or thousands of bitcoin and getting somebody super wealthy,\u201d he said. \u201cI\u2019m personally going to have, as just one example, a hell of a lot more interest in a bitcoin wallet that processes even several hundred dollars for child exploitation material or terror financing than a wallet that processes, let\u2019s say, 100 times that amount for scam proceeds.\u201d<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">In the world of scams, though, the magnifying glass has been turned onto Sanders. CipherBlade wrote a report disputing findings of The Wall Street Journal that claimed a crypto exchange, ShapeShift, had allowed unfettered money laundering on its platform. (The report contended The Wall Street Journal had overestimated ShapeShift&#8217;s problem.) Some sleuths went looking into CipherBlade\u2019s background and questioned the company\u2019s claims of recovering millions in stolen crypto and credibility, but had no evidence to contradict it. It\u2019s not surprising that someone akin to a crypto bounty hunter might raise eyebrows. Sanders thinks skeptics are right to have questions and poke holes in the industry. <\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">\u201cI actually agree with a lot of them a lot of the time,\u201d he said, in relation to the skeptics. \u201cBut that\u2019s kind of the ironic thing\u2014I\u2019ve actually taken their side on quite a lot of things against my industry. They are right: This industry needs a whole lot more skepticism.\u201d<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">Sanders himself is a crypto industry skeptic but a blockchain believer. He has spent enough time embedded there to see the tech\u2019s power and potential, but has also seen too many people make mistakes. \u201cI\u2019m so frustrated because the technology behind this, the underlying technology, is fascinating, amazing. And I am a true believer in blockchain tech,\u201d he said. \u201cIf you look at the industry right now, the majority of the volume and the participants are speculative investments. And that\u2019s not a good look.\u201d<\/p>\n<\/div>\n<div class=\"style__ArticleBlock-sc-a03bb0e7-4 geZIRs\">\n<p class=\"sc-iqcoie haqDtI\">But as long as there are scams and rug pulls and mysteries to uncover on the blockchain, there\u2019s work for Sanders.<\/p>\n<\/div>\n<\/div>\n<p><br \/>\n<br \/><a href=\"https:\/\/www.morningbrew.com\/daily\/stories\/2022\/08\/04\/meet-the-guy-uncovering-crypto-thefts\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ian Balina was reviewing initial coin offerings, the crypto industry\u2019s equivalent of an initial public offering, live on YouTube in 2018 when a hacker emptied around $2 million worth of cryptocurrency from one of his wallets. It may have been his old college email address that he used as a backup to another account that [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":24952,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[39],"tags":[1887,880,3372,3643,10224,10223],"class_list":["post-24951","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ico","tag-biggest","tag-cryptos","tag-guy","tag-meet","tag-thefts","tag-uncovering"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"http:\/\/egrowonline.com\/wp-content\/uploads\/2022\/08\/3252ecdff59700cbc13c546005c350904fef856b-1500x1000.jpg","_links":{"self":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/24951","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=24951"}],"version-history":[{"count":1,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/24951\/revisions"}],"predecessor-version":[{"id":24953,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/posts\/24951\/revisions\/24953"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=\/wp\/v2\/media\/24952"}],"wp:attachment":[{"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=24951"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=24951"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/egrowonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=24951"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}