Twenty-two-year-old Malone Lam, a citizen of Singapore and recent resident of Miami, pleaded guilty on Tuesday to one count of RICO conspiracy. Lam admitted to leading a gang that utilized social engineering tactics to steal and launder more than $245 million in cryptocurrency by targeting individuals rather than hacking online wallets directly.
According to prosecutors, Lam and his associates posed as trustworthy organizations to trick wealthy cryptocurrency holders into surrendering personal data and security access. The enterprise originated from relationships formed on online gaming platforms, with members engaging in database hacking, target identification, fraudulent phone calls, money laundering, and physical break-ins.
The $245 Million Heist
The largest theft orchestrated by the group occurred on August 18, 2024. Prosecutors stated that the offenders impersonated representatives from Google and Gemini, convincing a victim in Washington, D.C., to grant access to Google Drive and provide security codes. The attackers subsequently drained over 4,100 Bitcoin, valued at more than $245 million, from the victim's wallet.
Additional incidents linked to the group included the theft of approximately $800,000 from a victim identified as M.C. in June 2024, and about $14 million from another victim, S.P. A separate burglary attempt in New Mexico aimed at accessing a hardware wallet ultimately yielded no cryptocurrency.
Lavish Spending and Arrest
Proceeds from the criminal operation funded an extravagant lifestyle. Group members reportedly spent up to $500,000 during a single night at a nightclub, rented luxury villas, chartered private jets, and purchased high-end vehicles worth $3.8 million. As part of his guilty plea, Lam has agreed to forfeit luxury cars, including Ferraris, Rolls-Royces, Lamborghinis, and Mercedes-Benzes, to be used as victim compensation.
Lam was arrested in Miami on September 18, 2024. An accomplice, Evan Tangeman, was previously sentenced in April for laundering funds related to the scam operation. Lam faces up to 20 years in prison, with a status hearing scheduled for December 8.
Industry Implications
The case highlights ongoing vulnerabilities in access control rather than flaws in blockchain code. Regulatory bodies, including Hong Kong's securities regulator, have warned that weak approval controls can undermine custody systems regardless of underlying technologies such as hardware security modules, multi-party computation, or multisignature setups.
Industry data underscores the scale of similar threats. Chainalysis estimated that scams received at least $14 billion on-chain in 2025, with projections potentially exceeding $17 billion as more addresses are identified. Furthermore, the FBI recorded 181,565 cryptocurrency-related complaints resulting in more than $11 billion in losses.
