Malone Lam to Plead Guilty in $240 Million Bitcoin Theft

Malone Lam, the alleged ringleader accused of orchestrating a $240 million Bitcoin theft, is scheduled to plead guilty on Tuesday, becoming the eleventh defendant to admit guilt in a sprawling case built on social engineering and stolen crypto. The 22-year-old Singaporean national will appear before U.S. District Judge Colleen Kollar-Kotelly nearly two years after his September 2024 arrest. Prosecutors say Lam and his associates stole more than 4,100 Bitcoin from a longtime Washington, D.C. investor in August 2024, then spent millions on luxury cars, watches, mansions and nightclub bottle service in the weeks that followed.

Malone Lam’s Guilty Plea Set for Tuesday Hearing

Eighteen defendants have been charged in connection with the theft, and Lam is poised to become the 11th to plead guilty after 10 co-defendants already admitted their roles. A federal prosecutor estimated at Lam’s first court appearance that sentencing guidelines could recommend at least 14 years in prison if he is convicted, according to Malone Lam $240 million Bitcoin theft guilty plea. That number alone tells you how seriously federal prosecutors are treating a case that started with a phone call.

Lam was arrested in September 2024 at one of his Miami properties, days after investigators traced a monthlong spending spree that included private jets, mansions and expensive watches. Prosecutors later alleged that an off-duty law enforcement officer tipped him off that agents were coming. On a recorded jail call cited in his indictment, Lam seemed to sense what was ahead.

We always talked about what it would be like if I were to go down, but never thought it would be this crazy.

How the $240 Million Bitcoin Heist Unfolded

The case centers on an Aug. 18, 2024 attack against a Washington resident identified in court filings only as ‘Victim 7.’ Prosecutors say the group targeted the man because he was wealthy and had held cryptocurrency for years. One caller posed as a Google representative and warned of a supposed hack attempt. Another claimed to work for crypto exchange Gemini and said malware had hit his wallet.

The callers talked the victim into handing over access to his Google Drive and reading off his security codes, which let the group seize control of more than 4,100 BTC, worth roughly $243 million at the time. Blockchain investigator ZachXBT helped trace the stolen funds and published research tying the group together within weeks. A private recording later captured one of the suspects reacting in real time as the Bitcoin landed in their wallets.

Investigators say the August attack wasn’t a first attempt. Lam and his associates, who met through online gaming communities, had reportedly pulled off other multimillion-dollar thefts using the same social engineering playbook since late 2023. Once they had the D.C. victim’s Bitcoin, the group moved it through multiple exchanges as launderers worked to convert chunks of it into cash.

Oh, my God! Bro, bro, I’m going to spaz out!

Spending Spree Exposed the Crypto Theft Ring

One mistake helped investigators identify the people behind the theft. Prosecutors say Jeandiel Serrano opened an account on a crypto exchange to hold nearly $30 million in stolen assets but failed to hide his IP address. Investigators traced it to a home in Encino, California, that he was renting for $47,500 a month. By then, the group had already started spending. One IP address gave everything away.

Serrano was vacationing in the Maldives when investigators identified him as a suspect. Lam and his associates reportedly dropped $4 million at Los Angeles nightclubs within a single month, and Lam alone spent more than $569,000 during one night out. The FBI says he used stolen crypto to buy a $2 million watch and more than 30 vehicles, including customized Porsches, Lamborghinis and Ferraris. Veer Chetal bought his parents a Lamborghini and reportedly kept $500,000 in cash stuffed inside a duffel bag hidden in their washing machine.

The FBI searched Chetal’s apartment in Brunswick, New Jersey, on Sept. 9, 2024, and found $37 million in stolen cryptocurrency in his possession. He agreed to cooperate with investigators soon after. Nine days later, agents arrested Serrano at Los Angeles International Airport, where he was wearing a watch valued at $500,000. He initially denied involvement but later admitted to possessing roughly $20 million in crypto stolen from the D.C. victim, prosecutors said. His charges remain pending.

I could only think of Ferris Bueller gone bad.

Why Are Physical Attacks on Crypto Holders Rising?

Physical attacks on crypto holders and their families are rising because thieves increasingly know that big wallets mean big targets, and kidnapping or violence can force victims to hand over funds faster than any phishing link. Roughly a week after the Bitcoin theft, masked men targeted Chetal’s parents in Connecticut.

The attackers intercepted the couple while they were driving through Veer Chetal parents kidnapped Danbury Connecticut, beating his father with a baseball bat before forcing them into a van and binding their hands. Prosecutors say the attackers wanted to pressure Chetal into giving up his share of the stolen Bitcoin. Witnesses called police, and officers arrested the alleged kidnappers before any ransom could be paid.

The numbers back that up. Chainalysis physical crypto attacks report 2026 found that criminals stole more than $30 million through 46 documented physical attacks worldwide during the first half of 2026, with 12 of those attacks resulting in an actual payout. Family members or people connected to crypto holders made up roughly 25% to 30% of the documented cases. That’s not a coincidence. Chetal’s parents were targeted precisely because they were an easier pressure point than Chetal himself.

The Lam case fits a wider pattern of thieves going after people instead of code. In January 2026, a separate crypto holder lost more than $282 million Bitcoin Litecoin hardware wallet theft after being tricked in a hardware-wallet social engineering scheme, with ZachXBT tracing the stolen assets through instant exchanges and into Monero. Another elderly American lost $330.7 million worth of Bitcoin in April 2025 after attackers used a similar social engineering scheme to take 3,520 BTC, moving the funds through more than 300 wallets and at least 20 exchanges.

Sentencing and the Path Ahead for Co-Defendants

Judge Kollar-Kotelly, who is overseeing Lam’s case, has already sentenced three of his alleged co-conspirators. Two defendants involved in laundering the stolen funds received prison terms of roughly six years. Chetal pleaded guilty to conspiracy charges in November 2024 and is still awaiting sentencing, while Tucker Desmond received probation after pleading guilty to destroying evidence tied to other members of the group. Desmond told the court in March that he had become ‘obsessed with the image of success rather than actually becoming a hard-working individual myself.’

Another defendant, known as Ferro, later used proceeds from the scheme to help pay Lam’s legal expenses, prosecutors said. Ferro pleaded guilty to racketeering conspiracy and declined to address the court at his May sentencing. His defense attorney, Kevin Wilson, described the defendants as mischievous ‘young kids,’ an argument Kollar-Kotelly rejected outright.

Federal data show just how big this problem has gotten. The FBI received 181,565 cryptocurrency-related complaints involving $11.37 billion in losses during 2025, while investment fraud alone accounted for 61,559 complaints and $7.23 billion in reported losses. Cybersecurity researcher Allison Nixon, who tracks an online hacker subculture known as The Com, said the money available through crypto fraud keeps pulling in young offenders and called for more law enforcement resources to fight back. ‘If we don’t seriously ramp up the resources to take these people down and do it faster, then it’s going to spread more and more,’ Nixon said.

Being young only goes so far.

This article is for informational purposes only and does not constitute investment advice. Every investment and trading decision involves risk. Readers should conduct their own research before making any financial decisions.