2020 Twitter Hacker Extradited to US, Pleads Guilty to Wire Fraud

Joseph James O’Connor, or PlugwalkJoe, has been charged with stealing over $794,000 worth of crypto

article-image

TY Lim/Shutterstock modified by Blockworks

share

One of the people involved in the 2020 Twitter hack that targeted President Obama, Elon Musk, and other high profile accounts has been extradited from the UK to the US. He pleaded guilty to wire fraud and money laundering, among other charges.

The Southern District of New York is accusing Joseph James O’Connor, whose handle was “PlugwalkJoe,” of stealing and laundering approximately $794,000 worth of cryptocurrency from an unnamed Manhattan-based crypto company. 

This scheme, which involved a SIM card swap hack of one of the company’s executives, took place between approximately March 2019 and May 2019, according to a Justice Department press release. After that, O’Connor and his co-conspirators initiated dozens of transfers to launder the stolen crypto, which included approximately 770 bitcoin cash (BCH), 6,363 litecoin (LTC), 407 ether (ETH) and 7 bitcoin (BTC), according to the November 2021 indictment

Following the theft of the funds, the next phase of the scam was to gain access to various high profile Twitter accounts. According to prosecutors, O’Connor and some of his co-conspirators took control of accounts themselves and tried to defraud other Twitter users.

These allegations seem to line up with the many fraudulent bitcoin scam tweets that popped up on the platform on July 15, 2020.

Then-presidential candidate Joe Biden was targeted, his account dubiously tweeting, “I am giving back to the community. All Bitcoin sent to the address below will be sent back doubled! If you send $1,000, I will send back $2,000. Only doing this for 30 minutes.”

Apple, CashApp, Kim Kardashian and other accounts with huge followings sent out similar tweets promising an easy pay day if users sent their bitcoin to the listed wallet address. 

Industry players in the crypto space were targeted as well in the July 15 hack, CoinTelegraph reported. At the time, Binance CEO Changpeng Zhao told users not to click on a trap link on Binance’s main Twitter account. Gemini, Coinbase, CoinDesk, Kucoin and @Bitcoin were also compromised. 

O’Connor is set to be sentenced on June 23 and, with his guilty plea, he agreed to forfeit the entire sum of money that was stolen. 

The district attorney’s office for the Southern District of New York didn’t immediately return a request for comment.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Research Report Templates.png

Research

Maple Finance has successfully navigated significant market challenges through its strategic pivot to secured lending (Maple v2) and the launch of its Syrup product. Syrup has become a primary growth driver, delivering sustainable, outperforming stablecoin yields and rapidly increasing TVL. The upcoming custody-first Bitcoin staking product (istBTC) presents another significant avenue for expansion. Crucially, Maple has achieved operational profitability, a key inflection point that, combined with a fully vested token and active buyback mechanism, strengthens its investment case. While valuation metrics suggest potential undervaluation relative to peers and growth, the primary forward-looking risk identified is the long-term sustainability of its current high-take-rate collateral staking revenue model.

article-image

LBTC and sBTC integrations unlock new DeFi yields for BTC holders

article-image

The Breakdown becomes your central hub for insightful, daily crypto macro analysis

article-image

What was a cool $500,000 would now be worth more than $7 million

article-image

Mersinger’s final day at the CFTC will be May 30

article-image

Squads CEO Stepan Simkin explained why the firm launched Altitude and how he’s thinking about stablecoins

article-image

Sponsored

Instead of endless wallet popups, users could connect once, set clear rules, and delegate permission to an app or to an AI agent.