Trackers Flag $1B Bitcoin Transfer Linked to Addresses Associated With 2016 Bitfinex Hack

Whale Alert flagged a transfer of 12,267 bitcoin worth about $1.01 billion on Thursday, posting the move at 13:44:17 UTC and categorizing it as an “unknown wallet” transfer to an “unknown new wallet.” At the time of the move, Whale Alert valued the transaction at $1,005,923,139.

The transfer drew immediate attention because public blockchain-labeling services link the sending address to bitcoin associated with the 2016 Bitfinex hack recovery. But the public data cited so far does not show the coins going to an exchange, and there is no public evidence that the bitcoin was sold. Whale Alert itself identified both ends of the transfer only as unattributed wallets.

That recovery link comes from analytics services rather than any official government statement. Whale Alert’s transaction page lists a sender address that public blockchain-labeling sites, including BitInfoCharts, identify as “Bitfinex-Hack-Recovery.” That label may help explain why the move stands out, but it is not legal proof of ownership or control by the U.S. government, Bitfinex or any other named entity.

The distinction matters. Large bitcoin transfers are closely watched because they can signal several very different things, including internal custody reshuffling, movement to an exchange or preparation for a sale. In this case, the publicly visible information referenced in the research shows only a transfer to a new, unattributed wallet. It does not publicly identify an exchange destination.

The Bitfinex connection is notable because U.S. law enforcement previously recovered a large amount of bitcoin tied to the 2016 hack of the crypto exchange. In 2022, the U.S. Department of Justice announced what it described at the time as its largest financial seizure ever, tied to that case. Public trackers have since associated some addresses with those recovered coins, which is why labels such as “Bitfinex-Hack-Recovery” attract market attention when funds move.

There is also a policy backdrop that makes any possible government-linked bitcoin transfer more complicated to interpret. A March 6, 2025, executive order created a Strategic Bitcoin Reserve, directing the Treasury Department to administer custodial accounts under that program. In practical terms, that means movement of seized or recovered bitcoin would not, by itself, indicate a liquidation. Wallet transfers can reflect administrative or custody changes rather than a decision to sell.

That caution is especially important this week, after recent reports described other government-linked bitcoin transfers to Coinbase Prime, the institutional custody and execution platform operated by Coinbase. But nothing in the public data cited here shows this transfer went to Coinbase Prime, another exchange or any known trading venue.

As of the reporting snapshot for this story, there had been no public statement from the Justice Department, the U.S. Marshals Service, the Treasury Department, Bitfinex, Coinbase Prime or major blockchain analytics firms confirming who controlled either address or why the transfer occurred. For now, the verified facts are the size of the move, the timing and the unresolved attribution around wallets that public trackers associate with Bitfinex-hack recovery coins.