Inside the Helix Bust: US DOJ Takes Control of $400 Million Linked to Darknet Crypto Crimes

ccn.comPublished on 2026-01-30Last updated on 2026-01-30

Abstract

The U.S. Department of Justice has seized over $400 million in assets linked to Helix, a major Bitcoin mixing service used by darknet criminals. The assets include cryptocurrencies, real estate, and funds forfeited by Larry Dean Harmon, the Ohio-based founder of Helix, who pleaded guilty to money laundering conspiracy and was sentenced to 36 months in prison. Operating from 2014 to 2017, Helix processed over 354,000 Bitcoin (worth approximately $311 million at the time) to obscure transactions for darknet market vendors involved in narcotics, fraud, and other illegal activities. The case, finalized in January 2026, highlights advancements in blockchain tracing and international cooperation in combating crypto-enabled crime networks.

Key Takeaways

  • The U.S. government seized over $400 million in assets linked to Helix, a major Bitcoin mixer.
  • Larry Dean Harmon, Helix’s Ohio-based operator, pleaded guilty to money laundering conspiracy and was sentenced to 36 months in prison.
  • The case, finalized in January 2026, underscores advancements in blockchain tracing and international cooperation to combat crypto-enabled crime networks.

The U.S. Department of Justice announced last week that it obtained legal ownership of more than $400 million in cryptocurrencies, real estate, and other monetary assets tied to Helix, a notorious darknet mixing service.

This represents one of the largest asset recoveries in the history of digital currency enforcement.

Try Our Recommended Crypto Exchanges
Sponsored
Disclosure
We sometimes use affiliate links in our content, when clicking on those we might receive a commission at no extra cost to you. By using this website you agree to our terms and conditions and privacy policy.
"}' data-trk="67adf8d4f12aaec7e4808bf5" href="https://links.ccn.com/links?code=693291aa4a5bcb62319448b2" rel="nofollow" target="_blank">
Bitget<\/h3>"}' data-trk="67adf8d4f12aaec7e4808bf5" href="https://links.ccn.com/links?code=693291aa4a5bcb62319448b2" rel="nofollow" target="_blank">

Bitget

promotions
New user rewards up to 6,200 USDT.<\/strong>"}' data-trk="67adf8d4f12aaec7e4808bf5" href="https://links.ccn.com/links?code=693291aa4a5bcb62319448b2" rel="nofollow" target="_blank"> New user rewards up to 6,200 USDT.
Coins
88
Claim Offer
"}' data-trk="6899b9831836d97539c51aa6" href="https://links.ccn.com/links?code=693293fa4a5bcb6231949c97" rel="nofollow" target="_blank">
Bitunix<\/h3>"}' data-trk="6899b9831836d97539c51aa6" href="https://links.ccn.com/links?code=693293fa4a5bcb6231949c97" rel="nofollow" target="_blank">

Bitunix

promotions
Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.<\/strong>"}' data-trk="6899b9831836d97539c51aa6" href="https://links.ccn.com/links?code=693293fa4a5bcb6231949c97" rel="nofollow" target="_blank"> Receive up to $100,000 worth of exclusive gifts for newcomers upon registration.
Coins
151
Claim Offer
"}' data-trk="68f8c175c334f42ea614a1a4" href="https://links.ccn.com/links?code=693294144a5bcb623194a054" rel="nofollow" target="_blank">
BTCC<\/h3>"}' data-trk="68f8c175c334f42ea614a1a4" href="https://links.ccn.com/links?code=693294144a5bcb623194a054" rel="nofollow" target="_blank">

BTCC

promotions
Get up to 10,055 USDT when you register, verify, and make the first deposit and the first trades.<\/strong>"}' data-trk="68f8c175c334f42ea614a1a4" href="https://links.ccn.com/links?code=693294144a5bcb623194a054" rel="nofollow" target="_blank"> Get up to 10,055 USDT when you register, verify, and make the first deposit and the first trades.
Coins
162
Claim Offer
Explore All Offers

DoJ Seizes $400 Million From Helix

In a major crackdown on cryptocurrency-facilitated crime, the DOJ finalized the forfeiture of over $400 million in assets connected to Helix.

These assets include cryptocurrencies, real estate, and funds previously seized from Larry Dean Harmon, the Ohio-based operator convicted of conspiracy to launder money.

Helix operated as a Bitcoin “mixer” or “tumbler” from 2014 to 2017, blending funds from multiple users to obscure their origins and destinations.

The service was particularly popular among darknet drug dealers and other criminals seeking to launder illicit proceeds.

During its operation, Helix processed approximately 354,468 Bitcoin—valued at around $311 million at the time—through more than 1.2 million transactions.

Much of this Bitcoin came from prominent darknet marketplaces like AlphaBay, where vendors sold narcotics, stolen data, and other contraband.

Investigators traced tens of millions of dollars from drug sales, fraud schemes, child exploitation material, and even extremist groups through Helix’s operations.

Larry Dean Harmon, a 41-year-old Akron, Ohio resident with ties to Belize, founded Helix.

He also developed Grams, a darknet search engine designed to help users locate vendors on hidden marketplaces.

Investigation, Arrest, and Legal Proceedings

Harmon was indicted in February 2020 on charges including conspiracy to commit money laundering and operating an unlicensed money transmitting business.

Authorities arrested him following searches of his Ohio and Belize residences, seizing cryptocurrency storage devices and records documenting millions in assets.

After shutting down Helix in 2017, Harmon ran Coin Ninja, a cryptocurrency exchange featuring a mixing service called DropBit, designed to bypass know-your-customer (KYC) requirements.

In August 2021, Harmon pleaded guilty to conspiracy to commit money laundering, admitting his role in laundering over $300 million in illicit Bitcoin.

He agreed to forfeit assets, including over 4,400 Bitcoin (valued at more than $200 million at the time).

In November 2024, U.S. District Judge Beryl A. Howell sentenced Harmon to 36 months in prison, three years of supervised release, and a forfeiture money judgment.

The Financial Crimes Enforcement Network (FinCEN) separately imposed a $60 million civil penalty for Bank Secrecy Act violations, which remains outstanding.

On Jan. 21, 2026, Judge Howell issued a final order transferring legal ownership of more than $400 million in assets, including cryptocurrencies, real estate, and monetary holdings, to the U.S. government.

International cooperation, including assistance from Belizean authorities, played a critical role in this effort.

The Helix investigation was led by the IRS Criminal Investigation Cyber Crimes Unit and the FBI Washington Field Office, beginning around 2019.

Blockchain analysis tools demonstrated that even mixed transactions could leave traceable patterns over time.

Top Trending Crypto Articles
  • Best Exchanges Check Out Our Recommended Exchanges Here
  • Buy Crypto Fast How To Buy Crypto with a Credit Card Now
  • Safe Crypto Gambling See Our Picks for the Best Crypto Gambling Sites

Related Questions

QWhat was the total value of assets seized by the U.S. DOJ in connection with the Helix case?

AThe U.S. Department of Justice seized over $400 million in assets, including cryptocurrencies, real estate, and other monetary holdings.

QWho was the operator of Helix and what was his sentence?

ALarry Dean Harmon, the Ohio-based operator of Helix, pleaded guilty to money laundering conspiracy and was sentenced to 36 months in prison.

QWhat was the primary function of the Helix service?

AHelix operated as a Bitcoin 'mixer' or 'tumbler,' designed to obscure the origins and destinations of cryptocurrency transactions by blending funds from multiple users.

QFrom which notorious darknet marketplace did a significant portion of the Bitcoin processed by Helix originate?

AA significant portion of the Bitcoin processed by Helix originated from the darknet marketplace AlphaBay.

QWhich U.S. government agencies led the investigation into Helix?

AThe investigation was led by the IRS Criminal Investigation Cyber Crimes Unit and the FBI Washington Field Office.

Related Reads

Dialogue with ViaBTC CEO Yang Haipo: Is the Essence of Blockchain a Libertarian Experiment?

"ViaBTC CEO Yang Haipo: Blockchain as a Hardcore Libertarian Experiment" In a deep-dive interview, ViaBTC CEO Yang Haipo reframes the essence of blockchain, arguing it is not merely a new technology or infrastructure but a hardcore libertarian experiment. This experiment, born from the 2008 financial crisis and decades of cypherpunk ideology, tests a fundamental question: to what extent can freedom and self-organization exist without centralized trust? The discussion highlights the experiment's verified outcomes. On one hand, it has proven its core value of censorship resistance, providing critical financial lifelines for entities like WikiLeaks and individuals in hyperinflationary or sanctioned countries via tools like stablecoins. However, Yang points out a key paradox: the most successful product, USDT, is itself a centralized compromise, showing users prioritize a less-controlled pipeline over pure decentralization. On the other hand, the experiment has exposed the severe costs of this freedom—a "dark forest" without safeguards. Events like the collapses of LUNA, Celsius, and FTX, resulting in massive wealth destruction and prison sentences for founders, underscore the system's fragility and the inherent risks of an unregulated environment. Yang observes that despite decentralized protocols, human nature inevitably recreates centralized power structures, speculative frenzies, and narrative-driven cycles (from ICOs to Meme coins), where emotion and belonging often trump technological substance. Looking forward, he believes blockchain's future is significant but niche. Its real value lies in serving specific, real-world needs for financial sovereignty and bypassing traditional controls, not as a universal infrastructure replacing all centralized systems. For the average participant, Yang's crucial advice is to cultivate independent judgment. True freedom is not holding a crypto wallet, but possessing a mind resilient to groupthink and narrative hype in a high-risk, often irrational market.

marsbit9m ago

Dialogue with ViaBTC CEO Yang Haipo: Is the Essence of Blockchain a Libertarian Experiment?

marsbit9m ago

North Korean Hackers Loot $500 Million in a Single Month, Becoming the Top Threat to Crypto Security

North Korean hackers, particularly the notorious Lazarus Group and its subgroup TraderTraitor, have stolen over $500 million from cryptocurrency DeFi platforms in less than three weeks, bringing their total theft for the year to over $700 million. Recent major attacks on Drift Protocol and KelpDAO, resulting in losses of approximately $286 million and $290 million respectively, highlight a strategic shift: instead of targeting core smart contracts, attackers are now exploiting vulnerabilities in peripheral infrastructure. For instance, the KelpDAO attack involved compromising downstream RPC infrastructure used by LayerZero's decentralized validation network (DVN), allowing manipulation without breaching core cryptography. This sophisticated approach mirrors advanced corporate cyber-espionage. Additionally, North Korea has systematically infiltrated the global crypto workforce, with an estimated 100 operatives using fake identities to gain employment at blockchain companies, enabling long-term access to sensitive systems and facilitating large-scale thefts. According to Chainalysis, North Korean-linked hackers stole a record $2 billion in 2025, accounting for 60% of all global crypto theft that year. Their total historical crypto theft has reached $6.75 billion. Post-theft, they employ specialized money laundering methods, heavily relying on Chinese OTC brokers and cross-chain mixing services rather than standard decentralized exchanges. Security experts, while acknowledging the increased sophistication, emphasize that many attacks still exploit fundamental weaknesses like poor access controls and centralized operational risks. Strengthening private key management, limiting privileged access, and enhancing coordination among exchanges, analysts, and law enforcement immediately after an attack are critical to improving defense and fund recovery chances. The industry's challenge now extends beyond secure smart contracts to safeguarding operational security at the infrastructure level.

marsbit1h ago

North Korean Hackers Loot $500 Million in a Single Month, Becoming the Top Threat to Crypto Security

marsbit1h ago

Trading

Spot
Futures
活动图片