On March 19, 2025, Malaysian police raided a suburban property in Kuching, Sarawak. The target was not a drug lab or a counterfeit ring—it was a Bitcoin mining farm. Officers seized 240 ASIC miners and arrested two men: a 20-year-old local and a 31-year-old foreigner. The name of the utility company, Tenaga Nasional Berhad (TNB), became the lead complainant. According to preliminary estimates, the stolen electricity over six months amounted to RM1.8 million—roughly $380,000 at current exchange rates. Ledgers don’t lie, but in this case, the meter did. The electrical panel had been tampered with, bypassing the utility's metering system entirely.
This is not a sensational headline. It is a routine enforcement action in Southeast Asia, where the intersection of cheap, subsidized electricity and crypto mining often results in illegal taps. But beneath the surface of this single bust lies a pattern that stretches across continents—from China’s Sichuan to Kazakhstan’s coal regions to Iran’s bypassed power plants. Follow the gas, not the hype. Here, the “gas” is kilowatt-hours, and the leakage tells a story about the underground economics of Proof-of-Work mining.
I have spent the better part of a decade auditing on-chain flows—ICOs, DeFi exploits, NFT wash trading—but this case reminds me that the most fundamental infrastructure layer is not smart contracts or consensus algorithms. It is the grid. In 2017, during my EOS pre-sale audit, I learned that code logic must withstand human greed. Here, the greed is not in code but in copper wires and transformers.
The Verifiable Cost of Illicit Hash
Let us quantify the damage. TNB’s loss of RM1.8 million over six months implies an average monthly consumption of roughly 300,000 kWh (assuming a blended retail tariff of RM0.50 per kWh for industrial users, though residential rates are higher). That is equivalent to running 240 Antminer S19j Pro units at 3,100W each, 24/7—a hash power of approximately 240 TH/s. For context, the entire Bitcoin network today operates at around 600 EH/s. This single bust represents 0.00004% of global hash rate. Insignificant, yes, but the method is the story.
The modification of electrical meters is a skilled trade. Criminals do not simply clip wires; they install bypass switches, neutralize tamper alarms, and sometimes rephase the meter to run backwards. In my years of forensic work, I have seen similar techniques used in industrial espionage and even in the 2020 DeFi Summer liquidity traps, where whales rotated assets across protocols to exploit interest rate discrepancies. The pattern is the same: exploit a loophole in a public utility—be it a smart contract or a power grid—until the operator catches on.
History repeats, if you read the chain. In 2021, Chinese authorities dismantled similar operations in Inner Mongolia. In 2022, Iran shut down licensed miners during peak demand, only to see illegal farms pop up in residential basements. Each enforcement action pushes miners to the next frontier, but the energy must come from somewhere. The on-chain evidence of these migrations is visible in difficulty adjustments and pool distribution data, but the root cause is always the same: a mismatch between the cost of legal electricity and the marginal profitability of mining.
The Economics of Stolen Power
Let us run the numbers. At the time of the raid, Bitcoin’s price hovered around $87,000. The average network difficulty was 110 trillion. An S19j Pro mining at 100 TH/s would generate roughly 0.0006 BTC per day—about $52 at current prices. Its daily power consumption is 74.4 kWh. At Malaysia’s industrial tariff of RM0.38/kWh ($0.08), the daily electricity cost would be $6. That leaves a gross profit of $46 per unit per day. For 240 units, that is over $11,000 daily gross profit—or $3.3 million over six months.
But these miners were not paying $6 per day per unit. They were paying $0. Their actual cost was the risk of capture. The $380,000 in stolen electricity represents only 11.5% of the gross mining revenue they would have generated if they were paying full price. In other words, by stealing power, they improved their profit margin from 88.5% to 100%—but at the cost of total asset forfeiture. The 240 miners, worth roughly $1.2 million at retail, are now evidence. The men face up to three years in prison and fines under Malaysia’s Electricity Supply Act.
This is not a victimless crime. TNB passes on the cost of non-technical losses to paying customers through higher tariffs. The neighbors of these illegal farms often experience voltage fluctuations and brownouts. The police are responding to community complaints as much as to utility data. In my analysis of the 2022 Terra collapse, I learned that systemic fragility often hides in plain sight—here, the fragility is in the grid’s inability to absorb high-density loads without proper metering.
Contrarian: The Real Culprit is Regulatory Laggard
The prevailing narrative is that crypto miners are inherently parasitic—leeches on public infrastructure. But that framing misses a crucial nuance: Malaysia, like many developing nations, does not offer a transparent, accessible industrial electricity tariff for crypto mining. The country is blessed with cheap hydropower from Sarawak and Sabah, but the power is often contracted to aluminum smelters and data centers. Small-scale miners cannot access those rates. The only way to compete with large, registered farms is to steal.
This is not an excuse; it is a structural observation. In 2023, Thailand introduced a special mining tariff. In 2024, Paraguay considered a similar move. Where legal pathways exist, miners register and pay taxes. Where they do not, they operate in the shadows. The Kuching bust is a direct consequence of regulatory failure to provide a legitimate on-ramp for energy-intensive computing.
Correlation is not causation. The fact that two men were caught stealing electricity does not mean all miners are criminals. It means the incentive structure is broken. In my 2024 ETF institutional flow analysis, I showed that institutional capital brings long-term stability. That stability begins with clean power and compliant hookups. Until regulators treat mining as a legitimate industrial activity—with appropriate tariffs and zoning—these busts will recur every quarter.
On-Chain Footprints of a Physical Crime
While the crime is physical, the data lives on-chain. The hash rate from these 240 machines was sent to a mining pool—likely F2Pool, Antpool, or ViaBTC. That pool’s wallets are public. The block rewards and transaction fees earned by those miners can be traced. In theory, one could identify the cluster of addresses that received payouts from this farm and correlate them with the timing of the bust. After the raid, those addresses went silent. The hash rate migrated elsewhere, perhaps to a pool in Kazakhstan or the United States.
I built a similar tracking script during the DeFi Summer to identify whale wallets rotating through Compound forks. The methodology applies here: scrape pool payout addresses, flag high-frequency payouts to a small set of addresses, and cross-reference with the timing of known enforcement actions. It is not perfect, but it gives a probabilistic map of where illegal mining power flows. This is the kind of work I do daily as an on-chain data analyst—connecting physical events to digital trails.
Anomaly detected. Look closer. The Kuching bust might be small, but it is part of a larger pattern. In the first quarter of 2025 alone, Malaysian authorities conducted 57 similar raids, seizing over 2,000 ASICs. That is roughly 2 EH/s of hash power removed from the network—still less than 0.5% of Bitcoin’s total, but significant enough to cause a minor difficulty adjustment in the following week. The on-chain effect is a blip, but the off-chain effect is a warning.
What to Watch Next
Two signals will determine whether this case remains a footnote or becomes a trendsetter.
First, watch TNB’s tariff filings. If the utility introduces a “blockchain computing” industrial rate—as some Southeast Asian regulators have discussed—then the incentive to steal power will diminish. If not, these raids will continue, and the black market for electricity will persist.
Second, monitor the court outcomes. If the two men receive harsh sentences (e.g., >3 years and heavy fines), it will deter others. If they receive light sentencing or community service, the deterrent effect is weak.
For institutional investors, the takeaway is clear: the hash rate from emerging markets carries geographic and regulatory tail risk. The energy cost advantage of Southeast Asia is real, but it is often offset by enforcement actions. The safest mining jurisdictions remain the United States (Texas, New York), Canada (Quebec), and Scandinavia. The “dirty hash” from illegal farms does not stay dirty forever—it eventually flows into legitimate pools, blending with clean power. The on-chain analyst’s job is to separate signal from noise.
Final Verification
I have been doing this work since 2017. I have seen ICOs that promised the moon and delivered code full of reentrancy bugs. I have seen DeFi protocols that paid 100% APR and collapsed in a day. And I have seen mining operations that treated electricity as a free resource until the police arrived. The common thread is not malevolence—it is a misunderstanding of public goods. Ledgers don’t lie, but they only tell half the story. The other half is written in meters and transformers.
The Kuching bust is not a catastrophe. It is a routine correction. But it serves as a reminder that every kilowatt-hour comes from somewhere, and in crypto, the cost of energy is the cost of truth. If we want honest mining, we must build honest infrastructure. Until then, follow the gas, not the hype.