The Teen Who Stole $24 Million and Never Got Charged
This chapter examines the true story of Ellis Pinsky, a 15-year-old hacker from suburban New York who masterminded a $24 million cryptocurrency heist using social engineering, SIM swapping, and database exploits. We explore the tools of early cyber reconnaissance, the mechanics of modern digital thefts, the fallout of greed among cybercriminal accomplices, and the legal ambiguities that allowed a juvenile mastermind to walk free.
1. The Awakening: From Video Games to Network Reconnaissance
Ellis Pinsky’s journey into cybersecurity began not in a formal classroom, but in the competitive trenches of online video games. Growing up in the suburbs of New York City, he viewed hacking as an extension of gaming—a high-stakes puzzle with tangible rewards.
Real-Life Analogy: The Invisible Neighborhood Watch
Note: Imagine walking down a public street while shouting your home address to a friend. To you, the street feels empty. But anyone standing on a balcony with a pair of binoculars and a directional microphone can instantly capture your words and pinpoint your location. This is precisely how network sniffers operate in the digital realm.
- The Trash-Talk Catalyst: While trash-talking during a video game match, an opponent suddenly taunted Ellis with the chilling question: "How’s the weather in Irvington?"
- Discovery of Wireshark: Ellis soon discovered that a free, legitimate network analysis tool called Wireshark could sniff out incoming network connections and expose the IP addresses of opposing players.
- IP Geolocation: By feeding captured IP addresses into basic search engines, users could determine the approximate physical origin of a connection.
- The Power Dynamic: As Ellis told Rolling Stone, realizing that a teenager could wield this level of digital surveillance created an immediate psychological shift: "Wow, I’m this little kid, but I can really wield this power."
2. Mentorship and the Dark Arts of ISP Doxxing
As Ellis expanded his digital footprint, he crossed paths with older, more seasoned cybercriminals who integrated him into underground forums and taught him advanced reconnaissance techniques.
- Ferno's Tutorship: A fellow gamer and hacker known as "Ferno" took Ellis under his wing, teaching him how to track down deeply personal records online.
- The Quid Pro Quo: In exchange for mentorship, Ellis utilized his growing research skills to retrieve private home addresses and social security numbers for Ferno, asking no questions.
- ISP Doxxing: Through Ferno, Ellis mastered a specialized form of social engineering known as ISP doxxing, which involved impersonating IT support personnel to trick telecommunications employees into revealing confidential customer records tied to specific IP addresses.
- The Double Life: While his classmates at Irvington High School viewed him as a bright teenager who could recover a forgotten password, Ellis was quietly operating as an elite digital operative.
3. The Technical Arsenal: SQL Injections and SIM Swapping
Ellis combined self-taught programming concepts with coordinated social manipulation to build an unstoppable attack vector against high-value targets.
SQL Injections
Ellis taught himself how to program, focusing heavily on vulnerabilities like SQL injections.
- The Mechanism: SQL injections exploit flaws in a website's input fields (such as login boxes or search bars) by injecting malicious database query commands.
- The Result: This tricks the backend database into executing unintended commands, allowing unauthorized actors to extract sensitive data like usernames, email addresses, and password hashes.
SIM Swapping
In 2016, President Barack Obama published an op-ed in The Wall Street Journal highlighting the importance of two-factor authentication (2FA)—specifically SMS codes sent to mobile phones. Hackers quickly targeted this weak link via SIM swapping.
- Targeting Telecom Insiders: Ellis scoured social media for users who listed major wireless carriers as their employers. He bribed them with hundreds of dollars in Bitcoin to assist with unauthorized SIM transfers.
- The Combined Vector: By pairing SQL injections to discover email addresses with SIM swapping to intercept 2FA texts, Ellis could effortlessly reset passwords and seize control of any target's digital life.
4. The $24 Million Heist: Targeting Michael Terpin
In 2018, an OGUsers community member named "Harry" contacted Ellis via Skype to ask if he could hack an AT&T phone belonging to crypto influencer Michael Terpin.
- Who Was Michael Terpin?: Terpin was a pioneer in the cryptocurrency community, a PR firm founder who helped launch major internet projects, and a prominent holder of digital assets.
- Execution of the Swap: On January 7, 2018, Ellis instructed his rogue AT&T contact via Telegram to port Terpin's SIM card to an online acquaintance's phone, ensuring the trail led away from him.
- Hunting for Keys: Ellis and Harry gained access to Terpin's email account. Running automated scripts, they initially found nothing in the primary inbox. Ellis then systematically searched Terpin's secondary email accounts and reset their passwords.
- The "Keys" File: Inside an Outlook account, they opened a file simply named "Keys". It contained recovery keys and wallet credentials.
- The Score: They bypassed a massive Ethereum wallet requiring an unknown secondary password, but successfully unlocked a Counterparty wallet using a 12-word seed phrase. Inside sat 3 million coins of a digital currency called Triggers, valued at over 24 million**.
5. Accomplice Greed and the Laundering Bottleneck
Because cryptocurrency exchanges enforce strict daily transaction limits, Ellis could not cash out $24 million worth of Triggers alone. He was forced to bring external actors into the fold.
- Crowdsourcing Liquidity: Ellis posted on Twitter, recruiting roughly half a dozen individuals with active Binance accounts to help convert Triggers into Bitcoin in exchange for cut commissions (50,000).
- The Betrayal (@erupts): A Twitter user operating under the handle
@erupts(later identified as 20-year-old Nick Truglia) agreed to help. After a successful initial test with 1 million to Nick's account for conversion. - The Theft: Nick greedily severed Ellis's access to the account, keeping the funds for himself. As Nick later admitted in court: "At some point I revoked [Ellis’] continued access to the account and kept for myself the additional money he had deposited."
- The Final Split: After paying off Harry, accounting for transaction fees, and absorbing severe cryptocurrency market volatility, Ellis walked away with 562 Bitcoins, worth roughly $10 million at the time.
6. Lavish Spending and the Illusory Normalcy
With millions in illicit digital wealth secured, Ellis engaged in sporadic luxury purchases while attempting to maintain the outward life of a normal teenager.
- Material Splurges: Ellis purchased a 100,000 in cash (stashing it under his bed inside a $40 Amazon safe), and flew home from Chicago with his mother on a private jet.
- Returning to Reality: Outside of these brief indulgences, Ellis went right back to high school soccer practice and flipping Yeezy sneakers online.
- The Grand Central Meeting: In a bizarre twist of psychological tension, Nick Truglia (the acquaintance who stole 6,000-per-month Manhattan apartment, and partying in VIP club sections—all while unable to confront Nick directly due to the untraceable nature of the theft.
7. The Investigation, Arrest, and RICO Lawsuit
While Ellis kept a relatively low profile, Nick Truglia's unbridled arrogance and lavish spending directly attracted the attention of law enforcement.
- The Private Jet Broker's Tip: Nick befriended a private jet broker named Chris David. Confused as to how an unemployed 20-year-old funded a luxurious lifestyle, Chris directly asked Nick, who boasted that he funded his life by stealing crypto through SIM swapping.
- The Smoking Gun Photo: Chris witnessed Nick attempting a SIM swap inside an AT&T store in Times Square and secretly photographed him—evidence that would later anchor civil litigation.
- The Arrest: On November 14, 2018, a high-tech task force arrested Nick at his apartment over a separate SIM swap. Examining Nick's iCloud backup, investigators uncovered direct evidence linking him to Michael Terpin's missing $24 million.
- The RICO Lawsuit: Michael Terpin filed a massive $71.4 million civil lawsuit (triple the stolen amount) against Nick Truglia and others under the RICO Act (Racketeer Influenced and Corrupt Organizations Act), which targets organized criminal enterprises.
8. The Net Closes on Ellis and the Unprecedented Fallout
Because Nick and Ellis were well-known online acquaintances, investigators quickly connected the digital dots.
- The Mother's Panic: On December 3, 2018, Ellis's mother received an email from Michael Terpin’s legal team accusing her son of masterminding the $24 million heist. Panicked, she retained defense counsel for him.
- Voluntary Surrender: Cooperating through counsel, Ellis voluntarily returned all 562 Bitcoins, the Patek Philippe watch, and the 2 million at the time of surrender.
- Senior Year Turmoil: Ellis's final year of high school was overshadowed by intense media scrutiny. Weeks before graduation, four masked men broke into his family home searching for hidden cash.
- Humanizing the Crime: Watching a video of Michael Terpin emotionally recount the calculating nature of the hack shattered Ellis's detached view of cybercrime, replacing video-game escapism with genuine remorse and accountability.
9. Legal Impunity and Professional Redemption
Despite Michael Terpin's aggressive pursuit of criminal charges, Ellis Pinsky was never arrested or charged.
- The Juvenile Immunity Factor: Terpin believed authorities declined to prosecute Ellis primarily because he was a minor at the time of the offense and law enforcement lacked clear frameworks for prosecuting juvenile cybercriminals of this magnitude.
- Higher Education: Ellis went on to attend New York University (NYU), majoring in Computer Science and Philosophy, and graduated in May 2024.
- Pivoting to Defense: Ellis founded a software development company helping entrepreneurs build applications, while actively pursuing roles in cybersecurity to defend organizations against the very attack vectors he once exploited.
Summary and Key Takeaways
- Early Exposure to Reconnaissance: Basic network tools like Wireshark and IP geolocation can expose young users to the intoxicating power of digital surveillance and cyber manipulation.
- The Danger of Social Engineering: Advanced hacks rarely rely on code alone; "ISP doxxing" and telecom impersonation are critical vectors in breaching secure infrastructure.
- The Mechanics of SIM Swapping: By bribing carrier employees to transfer phone numbers, attackers effortlessly bypass SMS-based two-factor authentication.
- The Vulnerability of Crypto Wealth: Unencrypted recovery keys, seed phrases, and poor password hygiene stored in standard email folders represent catastrophic single points of failure for digital asset holders.
- Honor Among Thieves is a Myth: Greed inevitably fractures criminal conspiracies, as seen when accomplice Nick Truglia stole $1 million from Ellis, triggering a cascading loss of control.
- Physical Consequences of Digital Crimes: Illicit digital acts inevitably spill into the physical world, resulting in home invasions, public notoriety, and intense legal liability.
- The RICO Act in Cyber Litigation: Victims of large-scale crypto thefts utilize civil statutes like the RICO Act to sue perpetrators for triple damages and hold negligent telecommunications providers accountable.
- The Juvenile Legal Blind Spot: Due to his minor status at the time of the offense, Ellis Pinsky avoided criminal charges despite masterminding one of the largest individual crypto heists in history.
- Restitution and Remorse: Ellis voluntarily surrendered all remaining assets—including 562 Bitcoins, cash, and luxury goods—after realizing the profound human toll of his actions.
- Professional Rehabilitation: Having earned a Computer Science and Philosophy degree from NYU, Ellis transitioned from offensive hacking to defensive cybersecurity and software development.