The National Computer Virus Emergency Response Center released a report on the LuBian mining pool's massive Bitcoin theft incident: suspected to be o

National Computer Virus Emergency Response Center released a technical traceability analysis report on the incident of the LuBian mining pool being hacked and a huge amount of Bitcoin being stolen. The report pointed out that in 2020, a major hacking incident occurred in the LuBian mining pool, with a total of 127272.06953176 bitcoins (valued at about 3.5 billion US dollars at the time, now valued at 15 billion US dollars) being stolen by the attackers. The owner of these huge bitcoins is the chairman of the Cambodian Prince Group, Chen Zhi. After the hacking incident, the bitcoins were stored in the attackers' controlled wallet addresses for as long as 4 years, almost untouched. This clearly does not match the typical behavior of hackers eager to cash in and chase profits, but rather seems like a precise operation orchestrated by a "state-level hacker organization." It wasn't until June 2024 that these stolen bitcoins were transferred to new bitcoin wallet addresses and have remained untouched since then.

On October 14, 2025, the US Department of Justice announced criminal charges against Chen Zhi and seized 127,000 bitcoins from him and his Prince Group. Various pieces of evidence indicate that the huge amount of bitcoins seized by the US government from Chen Zhi and his Prince Group were actually the LuBian mining pool bitcoins that had been stolen by hackers using technical means as early as 2020. In other words, the US government had already used hacker techniques to steal the 127,000 bitcoins held by Chen Zhi back in 2020, making this a typical "black-on-black" operation orchestrated by a state-level hacker organization.