Investigation Reveals Lick's Role in $90M Cryptocurrency Theft Ring

Authorities and blockchain security researchers have uncovered a major criminal operation allegedly orchestrated by John (Lick), according to recent reports from PANews. The case centers on the unauthorized seizure of over $90 million in digital assets from a U.S. government-controlled blockchain address, marking one of the most significant cryptocurrency theft incidents in recent months.

The Scale of the Theft Operation

Between November and December 2025, Lick and associates targeted numerous victims in a coordinated series of attacks. The investigation into Lick’s activities has exposed a sophisticated scheme designed to obscure the origins and movement of stolen funds. The total value of assets misappropriated across all identified theft incidents exceeds $90 million, demonstrating the scope and organization behind this criminal enterprise.

Lick’s Fund Transfer Strategy Through Tornado Cash

Blockchain monitoring systems have documented Lick’s attempts to launder the stolen cryptocurrency through Tornado Cash, a decentralized mixing protocol designed to obscure transaction histories. To date, investigators have tracked approximately 11,037 ETH being transferred into the mixer by accounts associated with Lick. This pattern of behavior indicates a deliberate effort to break the on-chain transaction trail and prevent asset recovery.

The use of mixing services like Tornado Cash is a well-documented money laundering technique in the cryptocurrency space. By funneling assets through such protocols, Lick appears to be attempting to distance himself from the original theft while maintaining access to the stolen funds. The investigation continues as authorities work to trace additional fund movements and identify other individuals potentially involved in the scheme.