Connect with us

Crypto World

DOJ Seizes $400M in Assets from Helix Darknet Cryptocurrency Mixer

Published

on

21Shares Introduces JitoSOL ETP to Offer Staking Rewards via Solana

TLDR:

  • Helix processed 354,468 bitcoin worth approximately $300 million between 2014 and 2017 operations. 
  • Larry Harmon pleaded guilty in August 2021 and received 36 months in prison plus asset forfeiture. 
  • The mixing service integrated directly with darknet markets through an API for bitcoin withdrawals. 
  • Federal authorities traced tens of millions from darknet drug markets through the Helix platform.

 

The U.S. Department of Justice announced it obtained legal title to over $400 million in assets connected to the Helix darknet mixing service last week.

Operator Larry Dean Harmon received a 36-month prison sentence in November 2024 after pleading guilty to money laundering conspiracy.

The forfeiture includes cryptocurrencies, real estate, and monetary holdings seized from Harmon’s operation.

Helix Processed $300 Million in Darknet Transactions

Helix operated as one of the most prominent cryptocurrency mixing services on the darknet between 2014 and 2017.

Advertisement

The platform blended digital currencies from multiple users through various transactions. This process obscured the original sources, final destinations, and actual owners of the funds.

Court documents reveal that Helix processed approximately 354,468 bitcoin during its operation. The total value equaled roughly $300 million in U.S. dollars at the time of those transactions. Much of this cryptocurrency originated from or was destined for darknet drug markets.

Harmon collected a percentage of each transaction as commission for operating the service. Online drug dealers particularly sought out Helix to launder their illegal proceeds.

The platform’s popularity stemmed from its integration capabilities with major darknet marketplaces.

Advertisement

Judge Beryl A. Howell of the District Court for the District of Columbia issued the final forfeiture order on January 21. Harmon had pleaded guilty in August 2021 and faced additional penalties including three years of supervised release. The court also imposed a forfeiture money judgment alongside the seized property confiscation.

Integration with Darknet Markets Through Advanced Technology

Harmon designed Helix alongside a darknet search engine called Grams to support all major darknet markets. The service featured an Application Program Interface that enabled direct integration with marketplace withdrawal systems. This API allowed darknet platforms to embed Helix functionality seamlessly into their bitcoin operations.

Investigators successfully traced tens of millions of dollars flowing between darknet markets and Helix. The IRS Criminal Investigation Cyber Crimes Unit and FBI Washington Field Office led the investigation.

International cooperation proved essential, with the Attorney General’s Ministry of Belize and Belize Police Department providing critical assistance.

Advertisement

The Justice Department’s Office of International Affairs coordinated efforts through U.S. Embassy Belmopan. The U.S. Attorney’s Office for the Northern District of Ohio also contributed to the case. Multiple agencies worked together to dismantle the operation and secure the substantial asset forfeiture.

The Computer Crime and Intellectual Property Section has convicted over 180 cybercriminals since 2020. Courts have ordered the return of more than $350 million in victim funds through their prosecutions.

This case represents another milestone in federal efforts to combat cryptocurrency-based money laundering operations.

Advertisement

Source link

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Ethereum Dust Attacks Have Increased Post-Fusaka

Published

on

Ethereum Dust Attacks Have Increased Post-Fusaka

Stablecoin-fueled dusting attacks are now estimated to make up 11% of all Ethereum transactions and 26% of active addresses on an average day, after the Fusaka upgrade made transactions cheaper, according to Coin Metrics. 

Ethereum is now seeing more than 2 million average daily transactions, spiking to almost 2.9 million in mid-January, along with 1.4 million daily active addresses — a 60% increase over prior averages.

The Fusaka upgrade in December made using the network cheaper and easier by improving onchain data handling, reducing the cost of posting information from layer-2 networks back to Ethereum.

Digging through the dust on Ethereum

Coin Metrics said it analyzed over 227 million balance updates for USDC (USDC) and USDt (USDT) on Ethereum from November 2025 through January 2026.

Advertisement

It found that 43% were involved in transfers of less than $1 and 38% were under a single penny — “amounts with insignificant economic purpose other than wallet seeding.”

“The number of addresses holding small ‘dust’ balances, greater than zero but less than 1 native unit, has grown sharply, consistent with millions of wallets receiving tiny poisoning deposits.”

Pre-Fusaka, stablecoin dust accounted for roughly 3 to 5% of Ethereum transactions and 15 to 20% of active addresses, it said. 

“Post-Fusaka, these figures jumped to 10-15% of transactions and 25-35% of active addresses on a typical day, a 2-3x increase.”

However, the remaining 57% of balance updates involved transfers above $1, “suggesting the majority of stablecoin activity remains organic,” Coin Metrics stated.

Median Ethereum transaction size fell sharply after Fusaka. Source: Coin Metrics

Users need to be wary of address poisoning

In January, security researcher Andrey Sergeenkov pointed to a 170% increase in new wallet addresses in the week starting Jan. 12, and also suggested it was linked to a wave of address poisoning attacks taking advantage of low gas fees

These “dusting” attacks typically involve malicious actors sending fractions of a cent worth of a stablecoin from wallet addresses that resemble legitimate ones, duping users into copying the wrong address when making a transaction.

Advertisement

Related: Ethereum activity surge could be linked to dusting attacks: Researcher

Sergeenkov said $740,000 had already been lost to address poisoning attacks. The top attacker sent nearly 3 million dust transfers for just $5,175 in stablecoin costs, according to Coin Metrics.

Dust does not represent genuine economic usage

Coin Metrics reported that approximately 250,000 to 350,000 daily Ethereum addresses are involved in stablecoin dust activity, but the majority of network growth has been genuine.  

“The majority of post-Fusaka growth reflects genuine usage, though dust activity is a factor worth noting when interpreting headline metrics.”

Magazine: DAT panic dumps 73,000 ETH, India’s crypto tax stays: Asia Express

Advertisement