After almost 10 years of being inactive, a Bitcoin wallet linked to the darknet market Nucleus has suddenly come to life. On March 7, 2025 the wallet moved $77.5 million worth of Bitcoin to three different addresses, leaving behind a balance of over $365 million.
This sparked a lot of chatter about what’s going on with the money whether the original owner is back in action, or if someone else has somehow gained access to the wallet.
Nucleus Wallet Gets Active Again
Nucleus was once one of the largest darknet markets on the web. It operated until 2016 and then disappeared without any warning or major law enforcement crackdown. It just shut down, leaving people to wonder if the operators pulled the plug on purpose or if something else caused the platform’s sudden exit.
Fast forward to today, and the wallet tied to Nucleus has started moving again. There are two possible explanations for this: either the original owner has finally decided to access the funds, or someone’s cracked the wallet’s keys and is now using it. Big transfers from dormant wallets like this are often seen as suspicious.
Crypto Crimes on the Rise
It’s not just the Nucleus wallet causing a stir—there’s been a string of major hacks in the crypto world lately. Ethereum losses alone have topped $1.5 billion, and Bybit, a crypto exchange, experienced the biggest hack in the industry’s history in February 2025. Hackers managed to breach Bybit’s cold wallet and sent the funds to other anonymous addresses, though Bybit’s CEO assured the public that the company is still solvent and will cover the losses.
But it’s not just exchanges that are getting targeted. A Russian crypto laundering network was uncovered in December 2024 by the UK's National Crime Agency. This group had been laundering billions of pounds through crypto exchanges, including Garantex, and eventually, several arrests were made and assets seized.
Crypto Infrastructure Hacks
It’s not just the money that's at risk -crypto infrastructure is also under attack. AdsPower, a company providing anti-detection technology for browsers, was hit by a hack in January 2025. The attackers used a modified version of the company’s plugin to steal users' mnemonic phrases and private keys. Within a few days, over $4.7 million in crypto was taken.
The same month, the Arbitrum network, which supports decentralized finance (DeFi) platforms, was also targeted. Hackers exploited a private key leak on the Moby platform, taking around $2.5 million worth of USDC, WESH, and WBTC. But in a rare turn of events, an ethical hacker managed to track down the flaw in the hacker's contract and recover about $1.5 million of the stolen funds.
