Feds: Jobless Montco man is no bit player in $50M bitcoin theft – Philly.com

Depending on whom you believe, Ted Price of Hatfield is either one of the most audacious cybercriminals to hit the internet in almost a decade or a drug-addled fabulist with delusions of grandeur.

Federal investigators and the unemployed 30-year-old himself say he pulled off one of the largest bitcoin thefts in the short history of the supposedly fraud-proof virtual currency, stealing the equivalent of nearly $50 million.

He also claimed, during a rambling confessionto Homeland Security investigators July 12, to have developed hacking exploits for use by foreign governments and to have plotted his escape with the use of a fake passport and a private jet.

But his lawyer and family contend that the jet-setting expert hacker described in the story Price spun for investigators bears no resemblance to the man they know a jobless addict who they say still relies on his parents for gas money, and who was high on oxycodone and other opioids at the time of those damning admissions.

More details are expected to emerge Thursday, when both sides will ask a federal judge to weigh in on the likelihood that Prices claims are true at a probable cause hearing in Philadelphia. The judges decision onthe strength of the evidence willdetermine the future of what could be one of the most significant cybercrime prosecutions in years one that already has drawn interest from cybersecurity experts.

If this guy actually did what he said he did, thats breathtaking, said Edward McAndrew, a former federal cybercrimes prosecutor who now helps to lead Ballard Spahrs privacy and data security group. If he could actually pick the bitcoin wallets of this many people, that really calls into question the security of the system.

Yet there is reason for doubt, his lawyer Catherine C. Henry said at a hearing in federal court in Philadelphia last week chiefly, that the man who contends he has access to currency worth millions and a private jet to aid his escape initially came to the attention of authorities as a suspect in a string of petty thefts.

A review of Prices history in various online forums for bitcoin enthusiasts and hackers reveals that his screen name, cited in court filings, had relatively little activity in those worlds prior to this spring. It is possible that he used other online monikers in the past.

If he is a millionaire and has a private jet, then of course hes a flight risk, Henry said in court last week while arguing for her clients release. But if thats made up and if, on the other hand, he has no income, lives with his parents, and has a 7-year-old child, then these are just grandiose statements.

Police in Northampton Township, Bucks County,began probing Prices background this month after the parents of an ex-girlfriend accused him of stealing two laptops and a gold necklace from their home.

Officers later recovered the missing items from various resale shops where Price had sold them, according to the arrest affidavit filed in his case. His ex-girlfriend discovered the evidence of his alleged cybercrimes including 105 printed pages listingstrings of alphanumeric code later identified as bitcoin keys in two laptop bags she retrieved from Prices family condo when she went to confront him, the affidavit said.

Authorities concede that theyre not yet sure whether Price has the ability to access the bitcoins he claims to have stolen.

Although they initially charged him July 13 with one federal count tied to his alleged bitcoin thefts, they later withdrew the charge and refiled the case based on charges tied to dozens of stolen credit-card numbers also found in Prices laptop bag that he said hed bought from hackers on the dark web.

Investigators say they have been unable to verify Prices story in other ways, including locating the fake passport Price claimed he obtained to flee the country under the name of Jeremy Renner, an actor he says he admired after seeing him in the 2012 Marvel movie The Avengers.

And yet, said Assistant U.S. Attorney Lesley Bonney, the investigation continues and additional charges could be added by the time Prices case goes before a grand jury.

Most people dont carry around hundreds of pages of bitcoin keys with them, she said at a court hearing July 19.

Bitcoin, a decentralized, virtual currency existing entirely on the internet, quickly drew adherents after its debut in 2009 because it enables anonymous transactions untethered to third-party banks.

The system relies on what experts have described as a fraud-proof public ledger, known as a blockchain, that records every confirmed bitcoin transaction and provides a foolproof way to track currency assigned to the bitcoin wallets ofusers.

A user accesses his or herbitcoin with two strings of complex alphanumeric codes a public key, similar to a bank account number, and a private key, akin to a password or signature that allows the money to be spent or exchanged to a physical form of currency. At the current exchange rate, onebitcoin is worth about $2,600.

But the same qualities that make bitcoin attractive to users have made it a prime target for scammers. Unlike major banks or credit cards, nearly all of which offer some form of fraud protection, bitcoin transactions are irreversible. And although victims of theft might be able to track their stolen funds through the public ledger of the blockchain, the anonymity built into the system makes it nearly impossible to identify the thief.

Price, according to court filings, told investigators this month that he developed a malware program that would surreptitiously divert bitcoins into his own wallet by disrupting the transactions of other users. With the program substituting his own bitcoin keys for those on either end of an exchange, he managed to funnelbetween $40 million and $50 million into bitcoin wallets under his control, he said.

Because the bitcoin wallet address [was] a legitimate address, the user[did] not realize that bitcoin transaction [was] being diverted into a wallet other thantheirs, wrote Emily J. Evans, a special agent with Homeland Security Investigations, in the affidavit drafted for Prices arrest.

Yet now,two weeks after investigators took Priceinto custody, even hisfamily seemsuncertain what to believe. Most of his close relatives either did not respond or declined to respond to requests for comment.

But during a brief conversation outside the condo where he lived with his son, Prices father, Samuel Sr., appeared conflicted.

Its all hearsay, he said when approached by a reporter. The truth will all come out in open court.

Then the elder Price paused.

Did he do what they said, as far as those bitcoins? Probably, he said. But I guess theyre still trying to figure it all out.

Published: July 26, 2017 12:36 PM EDT | Updated: July 26, 2017 3:40 PM EDT

We recently asked you to support our journalism. The response, in a word, is heartening. You have encouraged us in our mission to provide quality news and watchdog journalism. Some of you have even followed through with subscriptions, which is especially gratifying. Our role as an independent, fact-based news organization has never been clearer. And our promise to you is that we will always strive to provide indispensable journalism to our community. Subscriptions are available for home delivery of the print edition and for a digital replica viewable on your mobile device or computer. Subscriptions start as low as 25 per day. We're thankful for your support in every way.

Here is the original post:
Feds: Jobless Montco man is no bit player in $50M bitcoin theft - Philly.com