Ilya Lichtenstein, the self-confessed architect of the 2016 Bitfinex hack, has been released from federal prison after serving just 14 months of a five-year sentence. In a public statement posted to X on 2 Jan 2026, Lichtenstein explicitly credited the "First Step Act", a criminal justice reform bill signed by President Donald Trump during his first term, for his early release.
Bitfinex Hacker Lichtenstein Walks Free Early, Credits Trump’s First Step Act
5 January 2026 - 11:19 CET
By Stu Clelland
The development marks a surreal and abrupt conclusion to one of the largest financial thefts in history. Lichtenstein and his wife, Heather Morgan, were arrested in February 2022 for conspiring to launder 119,754 Bitcoin stolen from the Bitfinex exchange. Valued at billions of dollars at the time of their arrest, the hoard represented the single largest seizure of digital assets ever executed by the US Department of Justice.
The First Step mechanism
Lichtenstein pled guilty to conspiracy to commit money laundering in August 2023 and was sentenced to five years in November 2024. Under standard federal guidelines, inmates are typically required to serve 85% of their sentence. However, the First Step Act, passed with bipartisan support in 2018, allows eligible federal inmates to earn significant early release credits for good conduct and participation in recidivism reduction programs.
In his statement, Lichtenstein acknowledged the direct link between the legislation and his freedom: "Thanks to President Trump's First Step Act, I have been released from prison early." The acknowledgment highlights how a policy designed to address disparities in drug sentencing has effectively expedited the release of high-profile white-collar criminals.
From black hat to white hat
Lichtenstein wasted no time in attempting a professional pivot. He stated he remains "committed to making a positive impact in cybersecurity as soon as I can".
The transition from convicted cybercriminal to security consultant is a path well-trodden by former hackers, but Lichtenstein faces unique hurdles given the notoriety of the Bitfinex case. His ability to consult may be limited by the terms of his supervised release, which typically include strict monitoring of computer usage and financial activities.
He also appeared to anticipate a negative reaction to his rapid return to the sector, closing his statement with a direct address to his detractors. "To the haters, I look forward to proving you wrong," he wrote.
The preemptive defense underscores the friction his return will likely generate. While the First Step Act has legally cleared his path, the industry he intends to rejoin will now have to decide whether to welcome back the man responsible for its most infamous heist.
