Greenberg & Lieberman Files Amended Complaint to Recover $2.7M in Crypto Theft
On Thursday, February 19, 2026, Greenberg & Lieberman, LLC filed an amended complaint in U.S. District Court for the District of Maryland against John Does 1-20, Bridgers, DJI-Pay, Butter Network, Bitget, Bybit, HitBTC, Binance, OKX, Tronify, and Tether Limited, seeking to recover approximately $2.7 million in cryptocurrency stolen from the firm’s attorney escrow accounts. The theft occurred on January 14, 2026, and involved a coordinated cyberattack.
According to the complaint, a firm member, Mr. Lieberman, was deceived by a spoofed Ledger Live interface into entering recovery phrases and confidential access information. This led to the unauthorized transfer of approximately 14.78650191 Bitcoin (BTC) and 100 Ether (ETH) from the firm’s escrow wallets.
The stolen cryptocurrency was then allegedly laundered through multiple blockchain addresses, cross-chain conversions, and cryptocurrency exchanges. A forensic investigation revealed that the theft was executed by an organized criminal group employing sophisticated “smurfing” techniques, fragmenting the stolen Bitcoin into numerous small transactions.
The complaint alleges that approximately $886,298 in stolen funds were converted to USDT through the defendant Bridgers’ unlicensed swapping service. All converted USDT allegedly converged at a single hub address that processed over $4.2 million across 324 transactions since October 31, 2025.
The complaint names John Does 1-20 as the unknown individuals who executed the theft. Bridgers and DJI-Pay are named as defendants for allegedly facilitating money laundering through unlicensed services. Butter Network is named as a defendant for allegedly processing stolen proceeds through its cross-chain routing service. Several cryptocurrency exchanges, including Bitget, Bybit, HitBTC, Binance, OKX, and Tronify, are named as relief defendants, purportedly holding traced proceeds. Tether Limited is also named as a relief defendant, cited for its ability to freeze USDT tokens.
The fourteen counts listed in the complaint include violations of the Computer Fraud and Abuse Act, Defend Trade Secrets Act, RICO claims, fraud, conversion, civil conspiracy, unjust enrichment, and Maryland civil theft, among other state law claims.
Greenberg & Lieberman, LLC is seeking equitable relief, including a constructive trust over the stolen proceeds, immediate preservation of records by the relief defendants, and injunctive relief preventing the misuse of confidential information. The firm is also seeking compensatory, treble, and punitive damages, as well as attorney fees and costs.
The complaint notes that blockchain addresses and transaction identifiers are contained in sealed exhibits to protect the ongoing investigation while allowing for asset tracing and recovery.
Please contact BlockTribune for access to a copy of this filing.
