Trusted

Scammers Use OP_RETURN to Lay Claim to Mt. Gox’s Lost 80,000 Bitcoin

3 mins
Updated by Ann Maria Shibu
Join our Trading Community on Telegram

In Brief

  • Scammers are exploiting Bitcoin's OP_RETURN feature to target the dormant 1Feex wallet, containing 80,000 BTC from the Mt. Gox hack.
  • The scam involves sending transactions with messages linking to fake websites claiming legal possession of the wallet.
  • OP_RETURN’s use in phishing schemes raises concerns about network bloat and potential legal loopholes, prompting calls for tighter restrictions.
  • promo

A disturbing new scam is leveraging the obscure OP_RETURN feature in Bitcoin transactions to target one of the most infamous addresses in crypto history — the 1Feex wallet containing approximately 80,000 BTC stolen from Mt. Gox.

That stash is worth over $8.7 billion at current prices, making it a prime target for fraudsters attempting to claim legal rights over it.

How OP_RETURN Is Helping Scammers Target Mt. Gox’s Missing 80,000 Bitcoin

The Mt. Gox collapse in 2014 resulted in 850,000 BTC going missing. Although 140,000 BTC were recovered for creditor repayments, wallets like 1Feex have remained untouched until now.

Whoever is behind the scam is likely banking on two outcomes. The first is collecting sensitive user data by masquerading as the wallet’s custodian.

Second, they are laying the groundwork for a legal claim to ownership, perhaps similar to past lawsuits aimed at forcing Bitcoin developers to hand over access to lost coins.

Going by the latter, BitMEX Research has uncovered a scam. It involves sending small transactions to legacy Bitcoin addresses using the OP_RETURN field. This is a space in the Bitcoin blockchain meant to store arbitrary data.

One such transaction to the dormant 1Feex address contains a message directing viewers to a suspicious website.

“NOTICE TO OWNER: see www.salomon[]bros.[]com/owner_notice,” BitMEX Research revealed.

The linked website represents a client who has taken “constructive possession” of the wallet and is seeking to identify a “bona fide owner.”

Transactions with an OP_Return output
Transactions with an OP_Return output. Source: BitMEX Research on X

It reportedly claims affiliation with the historic Wall Street firm Salomon Brothers. However, BitMEX researchers state that the links are fake.

“Do NOT fill in this form,” the team warned.

BitMEX Research team also pointed out that the site seeks personal identification data under pretenses. The scam attempts to cloak itself in legal legitimacy.

Matthew Sigel, Head of Digital Assets Research at VanEck, reflects broader concerns in the crypto community, especially regarding the scam’s legal framing.

Users immediately mentioned Calvin Ayre, a longtime Bitcoin SV proponent and controversial figure. Ayre has reportedly funded legal actions asserting ownership over dormant or stolen Bitcoin.

However, some users took this insight with a pinch of salt, cautioning against slander. More closely, one user asked for proof that Ayre has run phishing-style scams.

Notwithstanding, the fact remains that OP_RETURN is now being weaponized in a gray zone between spam and pseudo-legal attacks.

Meanwhile, this scam arrives amid renewed controversy over OP_RETURN limits in Bitcoin Core. BeInCrypto reported on a proposal to restrict OP_RETURN data to 80 bytes under Bitcoin Core v0.30. The report cites network bloat and spam concerns.

While the limit remains under review, the new wave of scams may give fresh weight to the argument for tighter controls.

“OP_RETURN outputs greater than 83 bytes will increase significantly, UTXO bloat will keep getting worse and there will be more garbage on chain. This is going to age like a bad tattoo,” self-proclaimed Bitcoin expert Jimmy Song said at the time.

Further, in late April, BeInCrypto reported a rift among Bitcoin Core developers triggered by Peter Todd’s proposal to restrict OP_RETURN even further.

Critics argued that it would stifle innovation and off-chain use cases. Meanwhile, others supported it to reduce attack surfaces and abuse.

However, as this new exploit demonstrates, OP_RETURN is now being twisted for phishing schemes. Bad actors prey on legal uncertainty and dormant assets.

In this case, billions are at stake as the line between technical freedom and exploitable vectors is again under scrutiny. The interest comes as OP_RETURN transactions anchor these messages immutably into Bitcoin’s ledger.

Top crypto platforms in the US
Figure Markets Figure Markets Explore
Coinbase Coinbase Explore
COCA wallet COCA wallet Explore
Arkham Arkham Explore
Moonacy Moonacy Explore
Top crypto platforms in the US
Figure Markets Figure Markets Explore
Coinbase Coinbase Explore
COCA wallet COCA wallet Explore
Arkham Arkham Explore
Moonacy Moonacy Explore

Disclaimer

In adherence to the Trust Project guidelines, BeInCrypto is committed to unbiased, transparent reporting. This news article aims to provide accurate, timely information. However, readers are advised to verify facts independently and consult with a professional before making any decisions based on this content. Please note that our Terms and ConditionsPrivacy Policy, and Disclaimers have been updated.

Lockridge-Okoth.png
Lockridge Okoth
Lockridge Okoth is a Journalist at BeInCrypto, focusing on prominent industry companies such as Coinbase, Binance, and Tether. He covers a wide range of topics, including regulatory developments in decentralized finance (DeFi), decentralized physical infrastructure networks (DePIN), real-world assets (RWA), GameFi, and cryptocurrencies. Previously, Lockridge conducted market analysis and technical assessments of digital assets, including Bitcoin and altcoins such as Arbitrum, Polkadot, and...
READ FULL BIO
Sponsored
Sponsored