DOJ Hits Xinbi Scam Hub as Lightning Bugs Surface

Summary

• US Treasury sanctions Xinbi Guarantee cybercriminal marketplace
• DOJ seizes over $52 million in crypto tied to scam operations
• Bitcoin Lightning Network receives critical security fixes in LDK update

The U.S. Treasury's Office of Foreign Assets Control sanctioned Xinbi Guarantee on September 9, 2026. Officials acted under Executive Order 13581. The platform ran a major marketplace that pushed crypto scams.

The action hit a Chinese-linked site tied to transnational crime. It lined up with separate fixes for the Bitcoin Lightning Network.

The sanctions form part of a coordinated enforcement push by the DOJ Scam Center Strike Force. They show how crypto scams still trigger big government responses. Core protocols tackle lingering technical risks at the same time.

Context

Xinbi Guarantee served as a hub for scam centers. These centers moved multibillion-dollar volumes in illicit crypto flows. U.S. authorities link such platforms to fraud schemes that hit victims worldwide through social engineering and investment scams.

The Lightning Development Kit update on the same date fixed two security vulnerabilities in Bitcoin Lightning software. Those issues could have exposed nodes to fund theft. The fixes landed before any reported exploitation.

"OFAC is taking today's action pursuant to E.O. 13581."

, U.S. Department of the Treasury (home.treasury.gov)

Details

OFAC added Xinbi Guarantee to its list of transnational criminal organizations. This designation blocks U.S. persons from dealing with the entity. It also freezes any assets under U.S. jurisdiction. Chainalysis analysis described the platform as Asia's multibillion-dollar cybercriminal crypto marketplace.

The DOJ restrained more than $52 million in cryptocurrency in a single day. Officials credited help from Tether in tracing and freezing the funds. The operation also took down associated Telegram channels used to coordinate scam activity.

On the technical side, Lightning Development Kit version 0.2.6 patched the two vulnerabilities. The update reached users quickly. It restored full node security without disruption to the broader Bitcoin Lightning Network.

Outlook

Enforcement teams will keep watching similar marketplaces. Developers maintain routine patching cycles for Lightning and other protocols. Future actions will likely combine sanctions with on-chain tracing to limit the scale of crypto-enabled fraud.