$8 BILLION IN DORMANT BITCOIN HACKED ?! MARKET PANIC… BUT BITCOIN HITS NEW ATH
- khazzaka
- Jul 10
- 3 min read
👹 In early July 2025, the Bitcoin community was shaken as 80,000 BTC (over $8 billion) — moved from wallets dormant since 2011, the stone age of Bitcoin a fossil has awaken!
😱 The sudden movement of such a colossal sum triggered widespread panic. Adding fuel to the fire, legal concepts around “abandoned property” created anxiety.
1️⃣ Before the Incident (July 1st)
Attackers sent tiny Bitcoin transactions (dust) to the dormant whale wallets with a huge threat (in OP_RETURN fields, at 2025-07-01T00:30:00 UTC)
“LEGAL NOTICE: We have taken possession of this wallet and its contents.”
“Not abandoned? Prove it by an on-chain transaction using private key by Sept 30.”
“NOTICE TO OWNER: see http://salomonbros.com/owner_notice.”
2️⃣ Legal Intimidation
The messages referenced a legal notice through a website link mentioning “adverse possession” or “abandoned property laws”, suggesting that if the owners didn’t act, the sender could claim the assets.
3️⃣ Frightening Move (July 4th)
At 2025-07-04T02:41:32 UTC, a single test transaction of ~10K BCH was executed from one of the dormant wallets to itself. The same private key controls both BTC and BCH wallets being a hard fork of the Bitcoin.
4️⃣ Nuclear Bomb ☢️
At 2025-07-04T03:43:33 UTC, the first sweep of 10K BTC hit the blockchain. Someone moved this colossal amount to a modern SegWit address then transferred the remaining 70K BTC too.
😱 The Rumors
The sudden movement of such a colossal sum triggered widespread panic. Bitcoin wallets might suffer from poor entropy during key generation, potentially reducing the effective keyspace and making brute-force attacks feasible with Quantum Computers. Could early wallets be vulnerable?
Some even feared that Satoshi Nakamoto’s legendary wallets—holding over 1.1 million BTC—could be next. If funds were sold, the market could collapse.
💥 What Really Happened?
Bitcoin’s cryptography wasn’t broken. This was a carefully crafted social engineering attack aimed at scaring dormant whale wallet owners into making mistakes.
The attackers sent transactions with intimidating legal language and links to a fraudulent Salomon Brothers site made just days ago and with legal notice full of English errors.
➡️ This was designed to trick victims into revealing their private keys or seed phrases.
⚡️Fortunately, the owner of the 80,000 BTC wasn’t fooled. Instead of interacting with the scam, they quietly verified their keys by testing a transaction on BCH and then swiftly swept their Bitcoin into new, more secure SegWit wallets—likely using hardware wallets and better entropy to eliminate any risk.
🚀 This bold move both defeated the phishing attempt and reassured the market: Bitcoin’s cryptography remains intact. Finally Satoshi wallet is safe for certain old wallet generation weakness adding to the assurance and trust in Bitcoin in general, markets reached a new ATH

Step | Date & Time (UTC) | Blockchain | Action Description | Actor | TXID (if known) |
① | 2025-07-01T00:30:00 | Bitcoin | OP_RETURN Message 1: “LEGAL NOTICE: We have taken possession of this wallet and its contents” | Scammer | 4f7c80c05fd77a9c9b180f7f6400560d1ab6cf3a4ba1b6bf7429eeeefa500a05 |
② | 2025-07-01T00:54:00 | Bitcoin | OP_RETURN Message 2: “Not abandoned? Prove it by an on-chain transaction using private key by Sept 30” | Scammer | e511f90160b2f189eaf0adce7221979cbc9001bc29e6c5476914d002a9d19886 |
③ | 2025-07-03T02:26:00 | Bitcoin | OP_RETURN Message 3: “NOTICE TO OWNER: see salomonbros.com/owner_notice” | Scammer | ba9958bca2ae46e5fdea8737fef02bca6cfe1723196917699a058c30b6f52fd8 |
④ | 2025-07-04T02:41:32 | Bitcoin Cash | Test Transaction on BCH: ~10,000 BCH sent and returned to the same address (proof of key control). | Likely true owner | (TXID available on Arkham Explorer) |
⑤ | 2025-07-04T03:43:33 | Bitcoin | First Sweep on BTC: 10,000 BTC moved to new SegWit address. | True owner | (TXID available on Arkham Explorer) |
⑥ | 2025-07-04T05:00–14:00 | Bitcoin | Subsequent Sweeps on BTC: Additional 70,000 BTC moved in several transactions. | True owner | (5 TXIDs available on Arkham Explorer) |
⑦ | 2025-07-04T16:00:00 | Bitcoin | OP_RETURN Message 4 (Artistic Signature): “4 8 15 16 23 42” sent to dormant wallets (3 of 8 targeted). | Scammer | ac35cc92a1d97298c7b2a89e1f8260da61d0447c28927585baecd2bfa863aec0 |
2025-07-04T16:03:00 | Bitcoin | OP_RETURN Message 4 (cont’d): More addresses targeted with the same artistic signature message. | Scammer |





Comments