In a significant blow against cybercrime-linked wealth, the Australian Federal Police (AFP) have seized luxury assets—including nearly 25 Bitcoin, a waterfront mansion, and a Mercedes-Benz vehicle—from a Queensland man believed to have profited from a 2013 crypto exchange hack. The seizure is part of an ongoing effort to disrupt the financial gains of cybercriminals and reinvest confiscated wealth into public safety initiatives.
Bitcoin and Luxury Assets Confiscated
The AFP-led Criminal Assets Confiscation Taskforce (CACT) announced the confiscation in a press statement on 18 May 2025. The seized assets are collectively valued at around 4.5 million Australian dollars (approximately $2.88 million USD). The haul included:
Nearly 25 Bitcoin (BTC), currently valued at over AUD 2.5 million.
A waterfront mansion.
A luxury Mercedes-Benz car.
The AFP claims these assets were purchased using proceeds from a cybercrime-related income stream that could not be verified as legitimate. No criminal charges have been laid in connection with the Bitcoin theft itself, but the assets were forfeited via a court order, citing their likely origins in illicit activity.
Tracing Back to a 2013 Crypto Heist
Authorities began their investigation in 2018 after receiving intelligence from law enforcement in Luxembourg about suspicious Bitcoin transactions. The digital trail led them to Shane Stephen Duffy, a Queensland resident with a history of cybercrime. Duffy had previously pleaded guilty in 2016 to charges of fraud and computer hacking, including the unlawful sale of personal data obtained from a major breach.
A waterfront mansion in Queensland was confiscated under the allegation that it’s linked to the theft of 950 Bitcoin. Source: Australian Federal Police
The AFP claims Duffy is linked to the theft of approximately 950 Bitcoin stolen from a French cryptocurrency exchange in 2013. At the time, Bitcoin was significantly cheaper than its current price, meaning the stolen coins have appreciated massively in value over the years.
Although no criminal charges were filed over this specific theft, the authorities used their civil forfeiture powers to seize assets believed to be linked to the crime. These legal powers allow for confiscation even in the absence of a criminal conviction if assets are proven to be derived from unlawful conduct.
Notorious Past and League of Legends Data Scandal
Duffy’s name is not unfamiliar to cybercrime watchers. In 2016, he admitted guilt in a case involving the sale of personal data from League of Legends players. Though he was not directly involved in the 2011 cyberattack on Riot Games—the developer of the popular online game—prosecutors alleged that he obtained stolen data and used it for profit.
He also hacked the X (formerly Twitter) account of Riot Games President Marc Merrill, using it to promote his business that allegedly sold access to compromised accounts.
Duffy’s cybercrime portfolio made him a person of interest in the AFP’s investigation into the laundered proceeds of crypto theft. The agency concluded that the assets he accumulated had no clear legitimate source, thereby meeting the threshold for asset forfeiture under Australian law.
Reinvesting Crime Proceeds into Public Good
AFP Commander Jason Kennedy underlined the significance of this action, highlighting the unique powers granted to the AFP under the Proceeds of Crime Act. These powers allow the agency to “restrain and forfeit” assets it suspects were funded by criminal activity, including cybercrimes such as hacking and fraud.
Source: Australian Federal Police
“The profits derived from criminal activities are often used to fund further criminal acts, which is why the AFP works closely with our partners in the CACT to target the proceeds of crime and ensure they are reinvested in the community,” Kennedy said.
Proceeds from the sale of Duffy’s seized assets will be allocated to a special purpose fund. This fund is dedicated to supporting crime prevention initiatives and law enforcement operations across Australia.
Since July 2019, the CACT has restrained over $1.2 billion in assets suspected to be linked to criminal enterprises. These include luxury homes, high-end vehicles, yachts, cryptocurrencies, and fine art.
