Malone Lam pleads guilty to $245M crypto theft racketeering conspiracy
In brief
- Malone Lam pleaded guilty to RICO conspiracy involving $245M+ cryptocurrency theft and laundering
- International network targeted crypto holders via social engineering attacks and residential break-ins
- Conspiracy operated October 2023–May 2025; 12 additional defendants charged
- Stolen funds spent on private jets, exotic cars, and nightclub expenses exceeding $500K nightly
- Status hearing set for December 8; sentencing date pending
The guilty plea
Lam pleaded guilty before US District Judge Colleen Kollar-Kotelly to one count of participating in a Racketeer Influenced and Corrupt Organizations (RICO) conspiracy. The plea establishes his criminal responsibility nearly two years after he was initially charged. A status hearing was scheduled for December 8, but the Justice Department did not announce a sentencing date.
Lam and co-defendant Jeandiel Serrano were arrested on September 18, 2024, with their indictment unsealed the following day. They were initially accused of fraudulently obtaining more than 4,100 Bitcoin from a single victim on August 18, 2024. The attackers posed as Google support staff to compromise the victim's accounts, then impersonated Gemini support to persuade the victim to reset two-factor authentication.
The expanding conspiracy
On May 15, 2025, prosecutors announced a superseding indictment charging 12 additional defendants. The expanded case alleged a RICO conspiracy involving more than $263 million in crypto thefts. The new charges included a separate $14 million theft in July 2024 and an alleged home break-in targeting a hardware wallet.
Prosecutors alleged that Lam and Serrano laundered the proceeds through crypto mixers, exchanges, pass-through wallets and virtual private networks. Even more striking: Lam allegedly continued directing associates from pretrial detention, including arranging delivery of luxury items to his girlfriend.
The group's members allegedly spent stolen funds lavishly. Private jets, rental properties, high-end watches, and at least 28 exotic cars. Nightclub bills reached $500,000 per evening. Blockchain investigator ZachXBT identified the victim of the initial theft as a Genesis creditor, adding another layer to what prosecutors described as a sophisticated, coordinated operation targeting high-net-worth cryptocurrency holders.
This case underscores the vulnerability of even well-resourced individuals in the crypto space and the transnational nature of organized digital-asset theft.
