top of page
Search

$8 BILLION IN DORMANT BITCOIN HACKED ?! MARKET PANIC… BUT BITCOIN HITS NEW ATH

  • khazzaka
  • Jul 10
  • 3 min read

👹 In early July 2025, the Bitcoin community was shaken as 80,000 BTC (over $8 billion) — moved from wallets dormant since 2011, the stone age of Bitcoin a fossil has awaken!


😱 The sudden movement of such a colossal sum triggered widespread panic. Adding fuel to the fire, legal concepts around “abandoned property” created anxiety.


1️⃣ Before the Incident (July 1st)

Attackers sent tiny Bitcoin transactions (dust) to the dormant whale wallets with a huge threat (in OP_RETURN fields, at 2025-07-01T00:30:00 UTC)

“LEGAL NOTICE: We have taken possession of this wallet and its contents.”

“Not abandoned? Prove it by an on-chain transaction using private key by Sept 30.”


2️⃣ Legal Intimidation

The messages referenced a legal notice through a website link mentioning “adverse possession” or “abandoned property laws”, suggesting that if the owners didn’t act, the sender could claim the assets.


3️⃣ Frightening Move (July 4th)

At 2025-07-04T02:41:32 UTC, a single test transaction of ~10K BCH was executed from one of the dormant wallets to itself. The same private key controls both BTC and BCH wallets being a hard fork of the Bitcoin.


4️⃣ Nuclear Bomb ☢️

At 2025-07-04T03:43:33 UTC, the first sweep of 10K BTC hit the blockchain. Someone moved this colossal amount to a modern SegWit address then transferred the remaining 70K BTC too.


😱 The Rumors

The sudden movement of such a colossal sum triggered widespread panic. Bitcoin wallets might suffer from poor entropy during key generation, potentially reducing the effective keyspace and making brute-force attacks feasible with Quantum Computers. Could early wallets be vulnerable?

Some even feared that Satoshi Nakamoto’s legendary wallets—holding over 1.1 million BTC—could be next. If funds were sold, the market could collapse.


💥 What Really Happened?

Bitcoin’s cryptography wasn’t broken. This was a carefully crafted social engineering attack aimed at scaring dormant whale wallet owners into making mistakes.

The attackers sent transactions with intimidating legal language and links to a fraudulent Salomon Brothers site made just days ago and with legal notice full of English errors.


➡️ This was designed to trick victims into revealing their private keys or seed phrases.


⚡️Fortunately, the owner of the 80,000 BTC wasn’t fooled. Instead of interacting with the scam, they quietly verified their keys by testing a transaction on BCH and then swiftly swept their Bitcoin into new, more secure SegWit wallets—likely using hardware wallets and better entropy to eliminate any risk.


🚀 This bold move both defeated the phishing attempt and reassured the market: Bitcoin’s cryptography remains intact. Finally Satoshi wallet is safe for certain old wallet generation weakness adding to the assurance and trust in Bitcoin in general, markets reached a new ATH

ree

Step

Date & Time (UTC)

Blockchain

Action Description

Actor

TXID (if known)

2025-07-01T00:30:00

Bitcoin

OP_RETURN Message 1: “LEGAL NOTICE: We have taken possession of this wallet and its contents”

Scammer

4f7c80c05fd77a9c9b180f7f6400560d1ab6cf3a4ba1b6bf7429eeeefa500a05

2025-07-01T00:54:00

Bitcoin

OP_RETURN Message 2: “Not abandoned? Prove it by an on-chain transaction using private key by Sept 30”

Scammer

e511f90160b2f189eaf0adce7221979cbc9001bc29e6c5476914d002a9d19886

2025-07-03T02:26:00

Bitcoin

OP_RETURN Message 3: “NOTICE TO OWNER: see salomonbros.com/owner_notice”

Scammer

ba9958bca2ae46e5fdea8737fef02bca6cfe1723196917699a058c30b6f52fd8

2025-07-04T02:41:32

Bitcoin Cash

Test Transaction on BCH: ~10,000 BCH sent and returned to the same address (proof of key control).

Likely true owner

(TXID available on Arkham Explorer)

2025-07-04T03:43:33

Bitcoin

First Sweep on BTC: 10,000 BTC moved to new SegWit address.

True owner

(TXID available on Arkham Explorer)

2025-07-04T05:00–14:00

Bitcoin

Subsequent Sweeps on BTC: Additional 70,000 BTC moved in several transactions.

True owner

(5 TXIDs available on Arkham Explorer)

2025-07-04T16:00:00

Bitcoin

OP_RETURN Message 4 (Artistic Signature): “4 8 15 16 23 42” sent to dormant wallets (3 of 8 targeted).

Scammer

ac35cc92a1d97298c7b2a89e1f8260da61d0447c28927585baecd2bfa863aec0


2025-07-04T16:03:00

Bitcoin

OP_RETURN Message 4 (cont’d): More addresses targeted with the same artistic signature message.

Scammer



 
 
 

Comments


bottom of page