Lookonchain APP

App Store

LuBian Pool Bitcoin Theft Analysis: National Level Hacker Group Orchestrates "Hack on Hack" Event

2025.11.09 18:56:31

On November 9th, the National Computer Virus Emergency Response Center issued the "LuBian Mining Pool Hacked, Massive Bitcoin Theft Incident Technical Traceability Analysis Report." On December 29, 2020, a significant hack took place at the LuBian mining pool, with a total of 127,272.06953176 bitcoins being stolen (valued at approximately $3.5 billion at that time and now with a market value of $15 billion). The owner of these massive bitcoins is none other than Chen Zhi, the Chairman of the Cambodian Crown Prince Group. After the hack, Chen Zhi and his Crown Prince Group posted messages on the blockchain in early 2021 and July 2022, calling out to the hacker, expressing the hope that the stolen bitcoins would be returned and indicating their willingness to pay a ransom, but they received no response. Surprisingly, after the massive bitcoin theft, the bitcoins remained dormant in the hacker-controlled bitcoin wallet address for a long period of 4 years and were almost untouched. This behavior clearly does not match the typical hacker's rush to cash out for profit; rather, it seems more like a precise operation carried out by a "state-level hacker organization." It was not until June 2024 that these stolen bitcoins were moved to a new bitcoin wallet address and have remained untouched since. On October 14, 2025, the U.S. Department of Justice announced criminal charges against Chen Zhi and stated that 127,000 bitcoins had been seized from Chen Zhi and his Crown Prince Group. Various pieces of evidence indicate that the massive bitcoins seized by the U.S. government from Chen Zhi and his Crown Prince Group were actually the LuBian mining pool bitcoins that had been stolen by hackers using technical means as early as 2020. In other words, the U.S. government had already utilized hacker techniques to seize the 127,000 bitcoins held by Chen Zhi back in 2020 in a typical "hack-on-hack" event orchestrated by a state-level hacker organization.
Relevant content

Iran demands the US provide a clear response to its seven conditions; Trump again warns that he does not rule out military action against Iran.

Local time on the 3rd, Iranian authorities said no new progress has been made in the ongoing Iran-US talks. Separately, various Iranian figures have issued frequent statements, conveying Tehran’s hardline stance: "Iran will never surrender", "The US must respond fully and clearly to Iran’s seven proposed conditions and implement them before the Strait of Hormuz will be opened", "Iran is combat-ready and on the highest level of defense alert". On the same day, Qatari officials said the US and Iran are reviewing a proposal put forward by the mediator, with both sides remaining willing to continue negotiations, though differences remain to be bridged and no specific progress can be announced as yet. An informed source added that Qatari mediators are expected to receive feedback from Washington and Tehran on a new proposal within the next 36 hours. US President Donald Trump said he does not rule out taking military action against Iran after the midterm elections. (CCTV)

1 seconds ago

Coinbase adds Collector Crypt (CARD) to its token listing roadmap.

According to an official announcement, Coinbase announced that it will add CARD, the token of Solana-based physical trading card platform Collector Crypt, to its token listing roadmap.

1 seconds ago

Trump: The United States currently has no immediate plans to strike Iran.

According to a report from the UK's Financial Times, Trump stated that the United States currently has no immediate plans to strike Iran.

1 seconds ago

AMD's revenue and performance outlook both beat expectations, with shares surging over 9% at one point in after-hours trading.

AMD’s third-quarter revenue rose 45% year-over-year to $13.38 billion, beating market expectations of $13.09 billion; adjusted earnings per share hit $2.09, exceeding the $1.95 forecast. Data center revenue grew 97% YoY to a record $8.55 billion, above the $8.2 billion estimate. Meanwhile, client and gaming segment revenue fell 8% YoY to $3.72 billion, missing the $3.79 billion projection. AMD CEO Lisa Su forecasts the company’s revenue will grow by more than 80% in 2027, outpacing the 77% consensus analyst estimate compiled by LSEG. She expects data center chips will contribute around 80% of next year’s revenue, driving most of the firm’s revenue and profit growth. AMD’s shares jumped more than 8% in after-hours trading. For the fourth quarter, AMD projects revenue of roughly $17 billion, above the $16.23 billion market forecast; adjusted gross margin is expected to be around 55%, roughly in line with the market’s 55.27% estimate, down from the third quarter’s 56%. On the product front, the Helios rack system equipped with MI455X accelerators and Venice server chips has entered mass production, with output set to expand in the fourth quarter; initial batches of the systems are currently being tested by Meta. In February this year, AMD and Meta struck a deal under which AMD will sell up to $60 billion in AI chips to Meta over five years, and the agreement also allows Meta to purchase up to 10% of AMD’s shares. According to data from BIT Stock Platform, following the earnings release, AMD’s after-hours gains once topped 9%, lifting chip stocks including NVIDIA and SK Hynix higher.

1 seconds ago

At the close of US stock markets, Neocloud, optical communication, storage and semiconductor stocks all rallied across the board, with CIFR surging more than 18%.

According to BIT stock platform data, U.S. stocks closed on Tuesday: the Dow Jones Industrial Average fell 0.38%, the S&P 500 rose 0.36%, and the Nasdaq gained 0.83%. Neocloud-related stocks rallied across the board, with Cipher Digital (CIFR) up 18.37%, Hut 8 (HUT) rising 15.90%, Galaxy Digital (GLXY) gaining 15.35%, TeraWulf (WULF) climbing 14.53%, Core Scientific (CORZ) up 13.87%, and IREN rising 11.08%. Most optical communication concept stocks moved higher: Credo (CRDO) rose 7.78%, Ciena (CIEN) gained 5.54%, Coherent (COHR) up 3.77%, and Broadcom (AVGO) climbed 3.07%. Storage stocks rallied across the board: SanDisk (SNDK) rose 4.78%, Western Digital (WDC) gained 2.59%, Micron Technology (MU) up 2.58%, Seagate Technology (STX) climbing 2.13%, and SK Hynix (SKHY) rising 2.09%. Semiconductor stocks strengthened in tandem, with AMD up 3.65%, Broadcom (AVGO) climbing 3.07%, Arm (ARM) rising 2.90%, NVIDIA (NVDA) gaining 2.29%, KLA (KLAC) up 2.02%, and Applied Materials (AMAT) rising 1.97%.

1 seconds ago

Meta’s US dollar bonds garnered subscriptions totaling up to $58 billion, though their financing costs rose significantly compared to April.

According to people familiar with the matter, Meta Platforms (META.O)’s U.S. dollar bond offering drew subscription orders of up to $58 billion, roughly four times its planned minimum issuance size of $15 billion. The overall cross-border financing volume is expected to reach at least $20 billion, and the company plans to launch its first euro-denominated bond as early as Wednesday. Despite strong demand, Meta still needs to offer higher yields to attract investors: its 2056-maturity bond carries a spread of around 2.2 percentage points over U.S. Treasuries, about 0.9 percentage points higher than similar bonds in April this year. AI investment expansion has driven up financing costs for tech giants; bond yield spreads for large tech firms have risen to their highest level since 2003, with some firms' credit default protection costs near record highs. Analysts expect AI investment by relevant companies to total $4.5 trillion over the next three years, with Meta’s portion exceeding $740 billion. Meta has also raised $37.5 billion via common and preferred stock offerings, and plans to issue up to an additional $60 billion in shares; S&P has cut its rating outlook to negative due to AI spending pressures.

1 seconds ago

Popular tokens

BitcoinEthereumHyperliquidSolanaTRONBNBTetherAaveXRPPepeFartcoinOndoJupiterUniswapBonkPendleEthenaArbitrumAvalancheLidoChainlinkPolygonDogecoinCardano