Brother of Helix’s admin sentesed for stealing 712 bitcoin

Brother of Helix’s admin sentesed for stealing 712 bitcoin

Gary James Harmon, 31, from Cleveland, Ohio, has been sentenced to four years and three months in prison after stealing 712 bitcoin seized by investigators following the arrest of his brother, Larry Dean Harmon, accused of operating the Helix cryptocurrency mixer.

Helix was a darknet-based cryptocurrency money laundering service, known as a “mixer” or “tumbler.” Helix laundered over 350,000 bitcoin – valued at over $300 million at the time of the transactions – on behalf of customers, with the largest volume coming from darknet markets, the US Department of Justice said in a press release.

In February, the police arrested Larry Harmon, the alleged operator of the service, and seized various assets, including a cryptocurrency storage device that held money illegally obtained through the operation of Helix.

In August 2021, Larry Harmon pleaded guilty to money laundering conspiracy arising from his operation of Helix.

However, law enforcement was initially unable to recover bitcoin stored on the device due to the device’s additional security features. Knowing this, Gary Harmon used his brother’s credentials to access the device and transfer more than 712 bitcoin, which was the subject of “pending criminal forfeiture proceedings,” to his own wallets. He then laundered the proceeds through two online bitcoin mixer services before using the laundered bitcoins to finance large purchases and other expenditures. 

Gary Harmon agreed to the forfeit to the state the cryptocurrency he stole, including over 647 bitcoin, 2 Ethereum and 17.4 million Dogecoin.

“Due to the increase in market prices, the total value of these forfeitable properties exceeds $20 million,” the DoJ noted.


Back to the list

Latest Posts

AI chatbots fall for phishing scams

AI chatbots fall for phishing scams

The models provided the correct URL only 66% of the time; nearly 30% of responses pointed users to dead or suspended domains.
3 July 2025
Chinese hackers exploited Ivanti flaws in attacks against French government

Chinese hackers exploited Ivanti flaws in attacks against French government

ANSSI believes that the Houken campaign is operated by ‘UNC5174’, an entity believed to act as an initial access broker for China’s Ministry of State Security.
2 July 2025
Threat actors exploit Vercel's AI tool v0 to build sophisticated phishing pages

Threat actors exploit Vercel's AI tool v0 to build sophisticated phishing pages

The malicious actors used v0.dev to create fake login pages mimicking legitimate brands.
2 July 2025