Ukraine’s Asset Recovery and Management Agency (ARMA) has taken custody of cryptocurrency for the first time, following a law enforcement operation against an international hacking group accused of targeting companies and individuals in Europe and the United States. The agency described the transfer as a historic step, noting it is the first time ARMA is managing seized digital assets in its own crypto wallet.
Seizure Linked to International Hacking Probe
Authorities in Ukraine seized the cryptocurrency as part of an investigation into a transnational cybercrime operation. According to ARMA, the action targeted a group suspected of attacks on organizations and private individuals across multiple jurisdictions, including EU member states and the U.S.
Details on the value of the seized assets, specific cryptocurrencies involved, and the number of suspects were not disclosed. ARMA emphasized that the assets have been moved to an agency-controlled wallet for safekeeping pending further legal proceedings.
ARMA’s First On-Chain Custody
ARMA is the Ukrainian state body responsible for preserving and managing assets seized in criminal cases until a court issues a final decision. Establishing custody over cryptocurrency within its own wallet infrastructure marks a new operational capability for the agency, enabling it to hold and manage digital assets directly rather than relying on external arrangements.
The move aligns with a broader trend among law enforcement and asset recovery agencies worldwide, which are building procedures and technical capacity to secure, track, and ultimately dispose of seized crypto assets in accordance with court rulings.
Implications for Enforcement and Victim Recovery
Direct custody of seized crypto can help reduce dissipation risk, improve evidentiary handling, and streamline potential restitution processes. As criminal groups increasingly use digital assets, the ability of agencies like ARMA to manage them securely is seen as a key component of modern asset recovery frameworks.
Next Steps
The seized cryptocurrency will remain under ARMA’s management until courts determine its disposition. Authorities have not provided a timeline for the investigation or any subsequent asset sale or return to victims.