Singaporean Malone Lam Pleads Guilty in Massive Crypto Heist — But His US$569,000 Nightclub Bill Was Only Part of the Story

WASHINGTON — A 22-year-old Singaporean accused of helping build an international cryptocurrency theft operation has pleaded guilty in the United States, bringing prosecutors a major victory in a case involving hundreds of millions of dollars in stolen digital assets, luxury cars, multimillion-dollar watches and extraordinary nightclub spending.

Malone Lam pleaded guilty on Tuesday, September 8, to one count of participating in a racketeering conspiracy under the U.S. Racketeer Influenced and Corrupt Organizations Act, or RICO, before U.S. District Judge Colleen Kollar-Kotelly in Washington, D.C.

The U.S. Department of Justice described Lam as the ringleader of an international cybercrime enterprise that used social engineering and other methods to steal and launder cryptocurrency valued at more than US$245 million. The criminal network operated from at least October 2023 until May 2025, according to prosecutors.

Lam now faces a maximum sentence of 20 years in federal prison. His sentence has not yet been imposed, and a status hearing has been scheduled for December 8, 2026.

The 4,100-Bitcoin theft at the heart of the case

One incident stands out even within the enormous scale of the investigation.

In August 2024, Lam and other members of the group targeted a cryptocurrency holder in Washington, D.C., using what prosecutors described as sophisticated social-engineering tactics.

Members of the group allegedly impersonated representatives of trusted companies, including Google and cryptocurrency exchange Gemini, convincing the victim to provide information that ultimately gave the conspirators access to his digital assets.

More than 4,100 Bitcoin were taken.

The valuation of that theft has changed across court filings as Bitcoin prices and prosecutorial calculations changed. Initial federal charges in September 2024 described the stolen cryptocurrency as worth more than US$230 million. A later December 2025 superseding case filing valued the same 4,100-plus Bitcoin at approximately US$263 million at the time of the theft. AP's report on Lam's guilty plea cited prosecutors as putting the amount at more than US$245 million.

That explains why reports surrounding the case have referred variously to a US$230 million, US$240 million, US$245 million, US$260 million or US$263 million crypto theft.

How the alleged cybercrime network operated

Federal investigators say the operation was considerably broader than a single hack.

The network reportedly grew from relationships formed through online gaming platforms and included members in California, Connecticut, New York, Florida and overseas.

Different participants allegedly performed specialized roles. Some obtained stolen databases, others identified wealthy cryptocurrency holders, while callers approached those targets and convinced them that their accounts were under attack.

The supposed rescuers were actually attempting to gain control of the victims' cryptocurrency.

Federal prosecutors have also alleged that members of the enterprise resorted in some cases to physical break-ins targeting hardware cryptocurrency wallets.

In one July 2024 incident outlined by the Justice Department, another victim allegedly lost more than US$14 million in cryptocurrency. Prosecutors also accused one member of breaking into a New Mexico victim's home to steal a hardware wallet while Lam allegedly monitored the victim's location through an iCloud account.

From stolen crypto to supercars, mansions and private jets

What happened after the cryptocurrency was stolen became one of the most striking elements of the investigation.

According to federal authorities, members of the enterprise converted and laundered stolen cryptocurrency before spending enormous amounts on luxury goods and experiences.

Prosecutors say the group paid for high-end rental properties in Miami, Los Angeles and the Hamptons, chartered private aircraft, hired security personnel and amassed exotic vehicles.

The Justice Department said cars connected to the enterprise ranged in value from approximately US$100,000 to US$3.8 million.

Associated Press reported that Lam's purchases included more than 30 vehicles — including customized Porsches, Lamborghinis and Ferraris — as well as a watch valued at roughly US$2 million.

Then there were the nightclub bills.

CNA reported that Lam spent US$569,000 during a single night at a Los Angeles nightclub. Prosecutors separately said members of the enterprise routinely spent as much as roughly US$500,000 per evening on nightclub services.

The group was also accused of buying luxury watches and designer clothing and handing out expensive handbags during nightclub parties.

The spending spree did not last long

Lam's extravagant lifestyle became increasingly difficult to hide.

Federal agents arrested him in Miami in September 2024, only weeks after the massive Washington Bitcoin theft.

AP reported that an off-duty law-enforcement officer had allegedly tipped Lam off that authorities were coming to arrest him, citing the indictment. Investigators nevertheless detained him at a Miami residence.

The case subsequently expanded far beyond Lam.

Federal prosecutors announced additional defendants in 2025 as investigators mapped what they described as a multi-state and international criminal enterprise involving hackers, callers, money launderers, organizers and burglars.

By the time Lam entered his guilty plea, 18 defendants had been charged and he had become the 11th to plead guilty, according to CNA and AP.

Several others have already faced punishment.

Evan Tangeman, identified by prosecutors as a money launderer for the organization, was sentenced in April 2026 to 70 months in federal prison after admitting his role in laundering millions of dollars generated by the enterprise.

A guilty plea changes the biggest question in the case

For months, it was unclear whether Lam would challenge the charges at trial.

CNA reported that the U.S. government presented a new plea offer in November 2025 and that Lam's attorney told the court in May that substantial progress had been made toward resolving the case.

Several alleged co-conspirators had also reportedly indicated that they could testify against Lam if the prosecution went to trial.

That uncertainty ended on September 8.

During a hearing lasting roughly two and a half hours, Lam confirmed the government's account of his involvement and formally entered his guilty plea.

The plea represents one of the most significant developments yet in a sprawling investigation that has followed stolen cryptocurrency from digital wallets to luxury homes, exotic vehicles, private aircraft and extraordinary nights out.

But Lam's guilty plea does not close the case.

Other defendants remain before the courts, authorities continue attempting to recover money for victims, and Lam still has to learn how much of the maximum 20-year prison term he will actually serve.

His next major court date comes on December 8, 2026, when Judge Kollar-Kotelly is expected to move the case closer to sentencing.

For a criminal enterprise built around moving digital money faster than victims could react, the biggest number left may no longer be the value of the stolen Bitcoin.

It could be the number of years its alleged mastermind ultimately spends behind bars.

WWC ONE MEDIA M.J.E