The cryptocurrency world has been rocked by the revelation of the largest Bitcoin theft in history, uncovered by Arkham Intelligence. A staggering 127,426 BTC was stolen from the Chinese mining pool LuBian in December 2020, a breach that went unnoticed for more than four years. At the time, the haul was worth $3.5 billion, but today its value has soared to nearly $14.5 billion.

This unprecedented Bitcoin heist reshapes the narrative of crypto security and raises urgent questions about the vulnerabilities of mining operations, particularly in an era of sophisticated hacking techniques.

Arkham Connects the Dots on the Hidden Hack

According to Arkham Intelligence, LuBian, once a top-ten global mining pool with roughly 6% of the Bitcoin network’s hash rate, suffered a catastrophic security failure in December 2020. Analysis of on-chain activity revealed that:

• 127,426 BTC were stolen in a single coordinated attack.
• The first breach drained over 90% of LuBian’s holdings.
• An additional $6 million in BTC and USDT was siphoned from a LuBian address on Bitcoin’s Omni Layer shortly after the main hack.

Remarkably, neither LuBian nor the attacker publicly acknowledged the incident. Instead, the mining pool shut down in early 2021, a move initially attributed to regulatory pressure in China and Iran, where it operated facilities. The true cause, now exposed, was a devastating theft that wiped out most of its treasury.

Weak Keys and Desperate Recovery Attempts

Arkham’s investigation suggests that the heist was enabled by poor private key management, possibly using a weak generation method susceptible to brute-force attacks.

Evidence from the blockchain reveals a desperate series of 1,500 small transactions, each including messages pleading for the stolen Bitcoin’s return. Despite these attempts, the hacker never responded.

While 11,886 BTC were preserved in recovery wallets (now worth $1.35 billion), the attacker remains in control of the stolen funds, last seen consolidating wallets in July 2024. This makes the LuBian hacker the 13th largest Bitcoin holder, surpassing even the notorious Mt. Gox hacker.

Bigger Than Mt. Gox: A New Benchmark for Crypto Theft

The LuBian hack surpasses every prior crypto theft in scale, including the infamous Mt. Gox collapse. It highlights that even established mining operations are not immune to catastrophic breaches if private key management and cybersecurity protocols are weak.

The incident underscores three critical lessons for the industry:

1. Mining pools remain prime targets due to their concentrated BTC holdings.
2. Proactive security audits and key rotation are essential for large custodial operations.
3. Silent hacks can distort market transparency, as billions in assets may remain under the control of bad actors for years.

A Year of Alarming Crypto Hacks

The exposure of the LuBian hack comes amid an already troubling year for crypto security:

• Certik reported $153 million lost in July 2025 alone, with $86.6M from exchange incidents and $55.4M from code vulnerabilities.
• Hacken revealed that $3.1 billion was lost in the first half of 2025, making it DeFi’s worst quarter since early 2023.
• AI-driven and social engineering attacks are surging, signaling a new era of sophisticated exploits.

Compared to these figures, the LuBian heist—though historical—dwarfs all other losses, illustrating that legacy hacks can outshine modern breaches in scale and impact.

Implications for Bitcoin and Global Mining Security

This Bitcoin heist serves as a wake-up call for the entire mining and custodial ecosystem. Mining pools, exchanges, and treasury managers must now assume that state-level or highly sophisticated attackers are constantly probing for weaknesses.

The ongoing presence of the stolen BTC in dormant wallets also raises questions about future market risks:

• Potential price shocks if the hacker attempts large-scale liquidation.
• Regulatory pressure on mining pools and custodial entities to enhance proof-of-reserves and security transparency.
• Encouragement for multisig adoption, reducing the risk of single-point failures in private key storage.

The crypto community now faces a stark reminder that billions can remain at risk without robust, layered defense strategies.

Conclusion

The revelation of the LuBian Bitcoin heist, uncovered by Arkham Intelligence, rewrites the history of crypto’s largest thefts. With 127,426 BTC stolen and $14.5 billion at stake, it highlights the persistent vulnerability of centralized custodial structures in the digital asset space.

As the market digests this revelation, the industry’s approach to mining security, key management, and transparency will likely face increased scrutiny. For Bitcoin itself, the event reaffirms its resilience as an asset, but exposes the fragility of the institutions built around it.