Ilya Lichtenstein, a notorious hacker who caused the infamous Bitfinex hack in 2016, is now free. According to federal records, he was released from federal facilities on January 2, 2026, after completing nearly a year of his five-year sentence.
Many people within the cryptocurrency industry and the legal profession have been shocked by this news, which came from the early release provisions of the First Step Act, a law passed during President Trump’s first presidential term that reformed America’s criminal justice system. Lichtenstein’s freedom marks the latest and most controversial application of the law, coming just one year into President Trump’s second term.
The Heist That Shook the World
The Bitfinex exchange suffered from an attack carried out by a cyberhacker called Lichtenstein using very advanced techniques in August 2016. The importance of the recent information is best understood by considering the severity of the crime; The hacker exploited the lack of security built into the platform and created over 2000 fake transactions to transfer 119754 BTC into his personal wallets. The approximate value of these stolen Bitcoins was $71 million USD at the time of the theft, but due to Bitcoin’s recent trading at all-time highs the total value is predicted to be $10 billion today. In 2022 U.S Courts ordered that an additional $65 million would go to be returned to previous owners, making this one of the largest monetary asset seizures ever carried out by the DOJ. This theft also marks a historic milestone in the ongoing battle against cybercrime.
The ‘First Step’ to Freedom
In November 2024, Lichtenstein received a federal prison sentence of five years for being part of a money laundering conspiracy. But thanks to the First Step Act, his prison sentence was reduced significantly. The First Step Act was enacted to reduce the rate of recidivism (repeat offenders) and the number of prisoners that had grown substantially. As such, eligible federal inmates can earn “time credits” by engaging in productive activity and rehabilitation programs.
Because Lichtenstein’s offense was non-violent and he had no prior criminal history, he was a prime candidate for the program’s benefits. Federal records indicate he aggressively accrued time credits, which, combined with standard “good time” reductions, accelerated his release date by years.
The “Razzlekhan” Connection
Lichtenstein did not act entirely alone in the aftermath of the hack. His wife, Heather Morgan—known infamously by her eccentric rap persona “Razzlekhan”—was convicted for her role in helping to launder the stolen proceeds.
Using a complex web of shell companies, darknet markets, and “chain-hopping” techniques, the couple attempted to clean the dirty Bitcoin for years. Morgan, who received a shorter sentence of 18 months, has also reportedly benefited from similar early release provisions, though her current status remains under supervised release.
A Pattern of Crypto Clemency?
Critics argue that not only has the release of Lichtenstein been an example of this administration’s increased soft touch towards crypto crime, but it has also been part of a larger trend that began when Trump returned to the White House in 2025 that includes notable pardons, such as that of Ross Ulbricht, the alleged operator of the Silk Road online drug bazaar, who was granted clemency after spending almost 11 years behind bars. Additionally, former Binance CEO Changpeng “CZ” Zhao received a presidential pardon shortly after pleading guilty to anti-money laundering violations.
For many in the “crypto-native” community, these moves are seen as a correction of aggressive over-prosecution. “The war on code is over,” tweeted one prominent industry lobbyist following the news. However, for cybersecurity experts and victim advocates, the message is troubling.
The Deterrence Dilemma
The release of the individual has sparked an intense public debate regarding how Justice operates in today’s digital environment. Many critics believe that allowing an individual convicted of stealing billions from others to serve only one year behind bars completely destroys any potential deterrent effect that Federal Law may have had over criminals in that digital environment.
“If you can steal $10 billion, return it, and spend less time in prison than a low-level drug offender, the risk-reward ratio for cybercrime is broken,” said a former federal prosecutor familiar with digital asset cases.
Conversely, supporters of the First Step Act argue that the system is working as intended. They point out that Lichtenstein cooperated with authorities to recover the funds, had no violent history, and successfully completed the rehabilitation requirements set by Congress. For them, prolonged incarceration serves no purpose other than vengeance.
What’s Next for the Hacker?
Since being released from jail, Lichtenstein will probably go through an extended term of supervised release, which will prohibit him from performing some types of financial transactions and require him to be monitored. It is still unclear what his future will hold. On one hand, he possesses many notable technical abilities and has fulfilled his legal obligation to society; therefore, it may not be too long before we find out if he desires to go back into the same industry that he had previously duped. At this time, Lichtenstein — who once controlled $10 billion worth of stolen Bitcoin — is now roaming the streets, serving as an example of the changing landscape in US social justice.
