
A wallet linked to the $577M HashFlare crypto Ponzi scheme transferred 10,600 ETH. Prosecutors are appealing the founders' sentence as too lenient.
A cryptocurrency wallet linked to Sergei Potapenko and Ivan Turõgin's $577 million HashFlare fraud stirred after more than three years. On-chain investigator ZachXBT flagged the transfer of 10,600 Ether, worth roughly $18.5 million. Security firm Cyvers confirmed the activity.
The address at 0xff575a22975cc413771825eb84c163189a4d5d22 sent the tokens to two recipient wallets. From there, the funds moved through instant exchange platforms HiFiSwap and Near Intents. Investigators said the entity behind the wallet began converting the Ethereum into Bitcoin. The transaction hash is 0xd0eafd5c03b24c2f54c579745cacbffe4c6df2d19973e55d52a5f40aa1d89e0.
HashFlare launched in 2015 as a cloud mining platform. It sold contracts promising a share of crypto mining profits. Between 2015 and 2019, the scheme collected more than $577 million from roughly 440,000 investors worldwide. Court filings later showed HashFlare operated at about 1% of the Bitcoin mining capacity it claimed. Instead of mining, the company showed customers fake dashboards with fabricated performance data. When investors asked to withdraw money, the founders bought Bitcoin on exchanges to pay them – a structure court documents describe as a classic Ponzi scheme.
Potapenko and Turõgin used investor funds to buy real estate, luxury cars, jewelry, and chartered private jet trips. Acting U.S. Attorney Teal Luthy Miller called it "a mirage of cryptocurrency mining." The pair also raised at least $25 million through a separate venture called Polybius, pitched as a blockchain-based bank. No bank was ever created, and no dividends were paid.
Both men pleaded guilty in February 2025 to conspiracy to commit wire fraud. U.S. District Judge Robert S. Lasnik sentenced them to 16 months in prison, which they had already served in custody. Each received a $25,000 fine, 360 hours of community service, and three years of supervised release in Estonia. Prosecutors had asked for 10-year prison terms.
Judge Lasnik called it a "difficult sentencing" because of concerns about treaty transfer logistics. He warned that without an approved transfer to Estonia, the defendants would face a harsher prison term than comparable American white-collar offenders, followed by indefinite immigration detention before deportation. Federal prosecutors filed a notice of appeal in late August 2025, challenging the sentence as too lenient.
Legal experts are split on whether the appeal will succeed. The Ninth Circuit typically defers to district judges unless a sentence falls outside reasonable bounds. Some experts warn that light sentences for large-scale fraud could undermine deterrence against future crypto crimes.
Victims are to be fully compensated from the more than $400 million in assets forfeited as part of the plea deal. The Department of Justice has not announced a timeline for distributing those assets.
The wallet activity adds a new dimension to an already complicated case. The transfer through instant exchange platforms and the conversion to Bitcoin makes the funds harder to trace, Cyvers noted. If the entity behind the wallet is connected to the defendants or their associates, the move could complicate asset recovery and forfeiture efforts. If the funds reach a centralized exchange with Know Your Customer controls, they could be frozen. The use of decentralized swap platforms suggests an effort to avoid that outcome.
For anyone tracking the case, the dormant-wallet activation is a reminder that long-silent addresses tied to large fraud cases can become active without warning. The Ethereum (ETH) profile and Bitcoin (BTC) profile show that sudden large movements typically have muted market impact unless the funds reach an exchange with thin order books. No exchange deposits have been confirmed so far.
The appeal and the wallet movement are separate threads. Both affect the timeline for victim restitution. A successful appeal could mean longer prison terms and potentially more cooperation on asset recovery. The wallet move could signal an attempt to shift funds before a final forfeiture order is enforced. The DOJ has not commented on whether it is tracking the transferred Ethereum.
Both defendants are expected to return to Estonia to serve their supervised release terms. The appeal process could stretch into late 2026.
Prepared with AlphaScala editorial tooling from the source reporting linked above. Indexable analysis may include a cited Alpha Score value. Publishing checks screen each story before release. Educational coverage, not personalized advice.