While the crypto industry's largest conferences compete for celebrity keynotes, the Federal Bureau of Investigation has spent nine years quietly running its own gathering — an invite-only working forum where investigators, compliance officers and security researchers compare notes on who is stealing what, and how.
The FBI's Virtual Asset Technical Exchange, formerly the Virtual Currency Symposium, held its latest three-day session in San Antonio, Texas, this September, drawing a couple of hundred law-enforcement officials, overseas investigators, compliance professionals and crypto-security specialists, CoinDesk reported on Wednesday, citing three previous attendees.
Who Was in the Room
The symposium is capped at roughly 50 private-sector vendors and partners, with total attendance in the hundreds. Blockchain forensics firms Chainalysis and TRM Labs were said to have attended — TRM confirmed its presence; the FBI and Chainalysis declined to comment. Nikhil Raghuveera, co-founder and CEO of compliance infrastructure firm Predicate, presented on stablecoin compliance and the GENIUS Act framework. Representatives of the Security Alliance (SEAL), the nonprofit that coordinates emergency response across the crypto ecosystem, and FinCEN, the Treasury bureau responsible for anti-money-laundering policy, also attended, the report said.
Attendees range from senior FBI officials and frontline investigators to other US agencies and overseas law-enforcement partners. "This is not a crypto event," one attendee told CoinDesk. "It is a law enforcement event for law enforcement and the people they work with."
What They Discussed
The program reads as a map of the year's threat landscape: the use of crypto by cartels, terrorist financing, cyber-enabled fraud, scams, human trafficking and violent crime — including so-called wrench attacks, where criminals coerce victims physically for private keys. Sessions also covered emerging hacks, North Korean operations and mechanisms for industry-to-law-enforcement intelligence sharing.
One detailed presentation covered the Drift exploit, in which hackers gained administrative control of the Solana-based exchange and used a manipulated token as collateral to steal more than $270 million in April — an incident Drift described as a six-month North Korean intelligence operation. The curriculum focus tracks the data: TRM Labs' first-half review attributed roughly $643 million, about 66% of all cryptocurrency stolen in the first six months of 2026, to North Korea-linked actors, as crypto.news reported.
The scale keeps compounding. TRM reported in September that 2026 has recorded roughly 333 crypto hacking incidents involving approximately $1.73 billion in stolen assets. Chainalysis, whose researchers attended the forum, found that sanctioned entities received 694% more crypto in 2025 than the prior year as Russia, Iran and North Korea increasingly used digital assets for state-backed financial and security operations.
Why It Matters
The forum's existence is itself a signal. The FBI established its Virtual Assets Unit in February 2022 as a central hub for cryptocurrency investigations across its criminal and cyber divisions, and the event has expanded from a government-weighted gathering into one crowded with industry security teams — a measure of how much law enforcement now depends on exchanges, forensic firms and volunteer responders like SEAL to identify attackers and trace stolen funds in the critical first hours of an incident.
For security teams, the takeaways are structural: investigators are prioritizing intelligence-sharing channels with industry; wrench attacks and physical-coercion thefts have entered the standard threat taxonomy alongside smart-contract exploits; and the North Korean track — months of patient reconnaissance before execution, as in the Drift case — is now the reference model for operational security against insiders, vendors and privileged access.
TrustGrade covers the security ecosystem around digital assets, from enforcement to emergency response. Verified trust data: trustgrade.ai.