US prosecutors accuse a man of remotely swiping 713 bitcoins from a hardware wallet seized in a case against his brother, who ran crypto mixing service Helix
the Feds had a Trezor but they never actually had the private keys. End mystery. https://www.bloomberg.com/... Kara Swisher / @karaswisher : READ, if only for the lede: Feds locked up a storage device full of ill-gotten cryptocurrency. Then someone started stealing the loot https://www.bloomberg.com/... via @BW @weldpond : Unplugging the wallet & physically locking it away is no protection. Brown warned that Larry could remotely take Bitcoin & the govt would be powerless to stop it. “Until we can secure them & transfer them to a govt wallet, those are available for transfer"https://www.bloomberg.com/ ...
Context & Ripple Effects
Federal crypto seizures keep colliding with the same problem: confiscating the device is not the same as controlling the coins. In this case the IRS-held evidence included a Trezor whose private keys stayed with the family — and per the reporting, attorney Brown warned that 'Larry' could move the bitcoin remotely before the government could secure it. The pattern runs back through earlier cases like the $13.4M traced from Silk Road to Ulbricht's laptop, where on-device access decided what prosecutors could actually recover.
The hardware side of this story has its own precedent: security researchers have shown these devices are not impenetrable, including Joe Grand's fault-injection attack that cracked a Trezor One to recover a forgotten PIN. This article is the mirror image — not an owner locked out, but an accused party allegedly exploiting the gap between custody and key control.
First-order effects
- The DOJ's seizure is effectively incomplete until it moves the 713 BTC into a government-controlled wallet — until then, the person with the keys, not the agency holding the device, controls the funds.
- The accused brother of the Helix operator now faces charges for theft of seized assets on top of the underlying money-laundering case against his sibling.
Second-order effects
- Every agency holding seized hardware wallets must treat them as live liabilities — unplugging and physically locking away a device provides no protection, forcing faster transfer-to-government-wallet procedures.
- Hardware wallet makers like Trezor face renewed scrutiny over whether their threat models account for adversaries with physical possession and time, a question Joe Grand's crack already raised.
Third-order effects
- If the pattern holds, crypto custody becomes a core law-enforcement competency: seizures are only real once keys are transferred, reshaping how forfeiture, evidence handling, and eventual disposals like the government's large wallet movements are executed.
- The case feeds the broader legitimacy question — when even the state cannot reliably hold confiscated crypto, the gap between legal title and technical control becomes a standing argument about who can actually own digital assets.
The trend: As federal crypto seizures scale up, law enforcement is being forced to build real-time key-custody capability, because possession of a hardware wallet no longer equals control of the assets on it.