Malone Lam Pleads Guilty in $245 Million Bitcoin (BTC) Theft Conspiracy

Guilty Plea Caps Two-Year Crypto Heist

Malone Lam, a 22-year-old Singaporean national, pleaded guilty on Tuesday to a single RICO conspiracy count tied to the theft of more than $245 million in Bitcoin (BTC) and other digital assets. Court documents identify Lam as the ringleader of an international cybercrime enterprise: he organized the operation, selected its targets and coordinated the roles of his co-conspirators, operating under the aliases “Anne Hathaway,” “$$$” and “King Greavy.” Prosecutors say the scheme ran from October 2023 through at least May 2025.

The group's access came through people, not code. Members built trust with victims through connections formed on online gaming platforms, then used social engineering to talk their way past targets — and in some cases physically broke into homes to extract the information needed to drain wallets. The crew operated from California, Connecticut, New York and Florida, with members stationed abroad as well.

Judge Colleen Kollar-Kotelly accepted the plea and set a status hearing for December 8. US Attorney Jeanine Ferris Pirro framed the outcome as a deterrent: “If you build a cybercrime empire, we will find you, dismantle your operation, and hold you accountable,” she said, describing a network that “stole hundreds of millions of dollars in cryptocurrency” through deception. The case traces back to the indictment filed in September 2024, which initially charged two defendants over the scheme.

From 4,100 BTC to a $263 Million Ring

The prosecution started far narrower than it ended. The original September 2024 indictment covered the theft of 4,100 BTC — worth roughly $230 million at filing — taken from a single victim in Washington, D.C. in August 2024. Investigators later folded that theft into a wider ring valued at $263 million, and one launderer in that crew drew a 70-month prison sentence in April this year. Members of the group reportedly impersonated support staff tied to Google, whose parent company is Alphabet, and to the Gemini exchange, to persuade victims into surrendering wallet credentials.

Where the money went is documented in unusual detail. Nightclub bills reached $500,000 in a single evening, and individual watches ran past $500,000 apiece. The conspirators rented mansions in Los Angeles, Miami and the Hamptons, hired private security details, chartered private jets, and collected exotic cars priced as high as $3.8 million. That spending pattern left what prosecutors describe as an obvious forensic trail — one reason the operation eventually unraveled in court rather than on-chain. Readers tracking the market in real time can follow live spot and futures prices on MEXC.

Weak Link Sits Outside the Wallet

Our reading of the Justice Department filing is blunt: no cryptographic failure occurred here. The $245 million left victim wallets because humans were deceived, followed and in some cases confronted at home — a class of loss no protocol upgrade can patch. As violent wrench attacks and social-engineering crews scale up, the defensive baseline shifts to cold storage on a self-custody hardware wallet, multi-party key handling, and treating every unsolicited “support” contact as hostile — the same zero-trust posture enterprise cybersecurity teams have enforced for years. The December 8 hearing will set sentencing expectations; the lesson is already on record.