Irish law enforcement and Europol have moved another 500 Bitcoin from a second dormant wallet linked to a major drug trafficking case, according to on-chain data tracked by Arkham Intelligence and reporting by The Block on May 20, 2026. The Criminal Assets Bureau (CAB) has not yet issued a formal statement confirming the operation, but blockchain records show funds leaving a wallet in what Arkham Intelligence labels the Clifton Collins cluster roughly eight weeks after the first successful seizure in late March.

The case involves 12 wallets holding approximately 6,000 BTC in total, currently valued at around €360 million (roughly $390 million). So far, two wallets have been accessed, recovering approximately 1,000 BTC. Ten wallets remain untouched.

---

A Custodian Switch That Signals Liquidation

The most notable detail in the second seizure is not the amount moved but where it went. The first 500 BTC, transferred on March 24, 2026, went to Coinbase Prime, an institutional custody service. The second transfer carries the transaction hash 4b07da12efc12cd54c9113857d928d11146616797ecb946b50861840a3a4aea9 and routes to a Wintermute: Binance Deposit address (1KbDEg1tDz2ErYgaDbaDhhawnLrSQFaFx5). Wintermute is a professional market-making firm. Funds routed through a Wintermute Binance deposit address are a strong on-chain indicator of planned liquidation rather than long-term custody. On-chain routing strongly suggests a shift from a hold strategy to an active sell strategy, at least for this tranche.

If confirmed, this would put Ireland's approach in direct contrast with the United States government, which under Executive Order 14233 (March 2025) directed federal agencies to retain seized Bitcoin in a Strategic Bitcoin Reserve rather than sell it. How different governments manage large seized holdings has real market consequences. Confirmed government sell-offs at scale can create localised price pressure, and traders and liquidity desks across Lagos, Nairobi, Mumbai, Karachi, and Dhaka should treat on-chain government wallet movements as actionable intelligence.

---

How a Former Beekeeper Bought 6,000 BTC for Under $36,000

The underlying case centres on Clifton Collins, a 55-year-old former beekeeper from Crumlin, Dublin, who ran cannabis cultivation and distribution operations across multiple Irish counties for over a decade.

Between 2011 and 2012, when Bitcoin traded at $4 to $6 per coin, Collins used criminal proceeds to purchase approximately 6,000 BTC, splitting the holdings across 12 wallets of roughly 500 BTC each. His total acquisition cost was likely between $24,000 and $36,000. That same stack is now valued at approximately €360 million.

Collins stored the private keys on a sheet of paper inside the aluminium cap of a fishing rod case at a rented property in Connemara, Co. Galway. After his 2017 arrest, his landlord cleared the property, likely discarding the only copy of those keys.

An Irish High Court confiscation order followed in 2020, at which point the wallets were valued at approximately €53 million. Collins received a five-year prison sentence for the cannabis conviction and, in late 2020, voluntarily surrendered approximately $1.4 million in accessible assets, including roughly $1.1 million held in a separate accessible Bitcoin wallet, as part of the court process. That partial cooperation confirmed that authorities had some financial engagement with Collins, but the 12 dormant wallets remained technically inaccessible. Without the keys, the confiscation order was legally sound but technically unenforceable. The wallets sat dormant for years while their value compounded.

The first breakthrough came on March 24, 2026. CAB, working with Europol's European Cybercrime Centre (EC3), announced it had accessed the initial wallet. An Garda Síochána stated in the official press release: "Europol hosted operational meetings at its headquarters in The Hague, the Netherlands, and provided critical support to Bureau investigators and analysts with the provision of highly complex technical expertise and decryption resources vital to the success of the operation." The specific method used to access the wallets has not been disclosed, and no timeline for disclosure has been given.

---

A Template for Enforcement Agencies Worldwide

The structural lesson from this case is directly relevant to regulators and law enforcement in Africa and South Asia, regions where crypto adoption is rising faster than enforcement capacity. According to the TRM Labs 2026 Crypto Crime Report, illicit digital assets accumulated globally reached $158 billion in 2025, a 145 percent year-over-year increase, with more than 50 percent of sanctioned addresses tied to drug markets. The Collins case demonstrates that courts can issue valid confiscation orders before technical access to a wallet is achieved, preserving the legal claim while operational capability is developed over a longer timeline. Kenya, which enacted comprehensive crypto legislation in October 2025 including provisions for law enforcement access to digital asset evidence, is among the jurisdictions best positioned to apply this model. South Africa has made notable regulatory progress, with its Financial Sector Conduct Authority classifying crypto assets as financial products in June 2023, but still faces enforcement capacity gaps as it works toward technical partnerships comparable to those available to agencies operating alongside Europol or the FBI. India, Pakistan, and Bangladesh each face analogous challenges, with documented criminal use of crypto networks running ahead of enforcement capabilities across the region.

AML Intelligence described the CAB strategy as a "textbook fincrime initiative," pointing specifically to the "deny, deprive" framework that aims to strip criminal networks of both operational funding and accumulated proceeds simultaneously.

With 10 wallets and approximately 5,000 to 5,500 BTC still to be accessed, this case is far from resolved. Each remaining wallet represents a potential recovery that would individually rank among the largest law enforcement crypto seizures in European history. CAB has not confirmed a timeline for further operations, and the decryption methodology that makes each access possible has not been publicly disclosed.