The National Computer Virus Emergency Response Center released a report on the incident involving the theft of 127,000 Bitcoins from Chen Zhi nearly five years ago: a national-level hacker organization was behind the operation.

On November 9, CoinWorld reported that the National Computer Virus Emergency Response Center released a technical tracing analysis report on the LuBian Mining Pool being hacked and a large amount of Bitcoin being stolen. The report pointed out that a major hacking incident occurred at the LuBian Mining Pool in 2020, in which a total of 127272.06953176 Bitcoins (worth about $3.5 billion at the time, now valued at $15 billion) were stolen by attackers. The holder of this large amount of Bitcoin is Chen Zhi, chairman of the Cambodia Prince Group. After the hacking incident, the Bitcoins stored in the wallet address controlled by the attackers remained dormant for four years, with almost no movement, which clearly does not conform to the general behavior of hackers eager to cash out for profit, but rather resembles a precision operation orchestrated by a “state-level hacker organization.” It wasn't until June 2024 that this batch of stolen Bitcoins was transferred to a new Bitcoin wallet address, and they have remained untouched since then. On October 14, 2025, the U.S. Department of Justice announced criminal charges against Chen Zhi and stated the confiscation of 127,000 Bitcoins belonging to Chen Zhi and his Prince Group. Various pieces of evidence indicate that the large amount of Bitcoins confiscated by the U.S. government from Chen Zhi and his Prince Group were already stolen from the LuBian Mining Pool by hackers using technical means as early as 2020. In other words, the U.S. government may have stolen the 127,000 Bitcoins held by Chen Zhi through hacking techniques as early as 2020, making this a typical “black eats black” incident orchestrated by a state-level hacker organization.