Huazhong University of Science and Technology's Elite Hacker Transforms into Cyber Police Officer, Exposes Billion-Dollar Coin Theft Gang, and Solves Hubei's First Virtual Currency Theft Case

BlockBeats News, April 27th – According to Hubei Daily, Guo Tingyu, a police officer from the Cyber Security Brigade of the Qingshan District Sub-Bureau of the Wuhan Public Security Bureau in Hubei, China, was recently awarded the Second-Class Merit. This young police officer, who is not yet 30 years old, graduated with a degree in Computer Science from Huazhong University of Science and Technology. After graduation, he worked as a programmer at the Wuhan branch of an internet company in Beijing. In 2023, he passed the civil service exam and joined the police force, with less than three years of service so far.

In early 2024, Guo Tingyu was transferred to the Cyber Security Brigade and took over the first virtual currency theft case in the province. The victim had their virtual currency worth over 300,000 RMB stolen due to downloading a counterfeit virtual currency wallet app. At that time, there was no previous experience in handling such cases in the province. Guo Tingyu conducted analysis from three aspects: the virtual currency distribution address, the development backend of the fake wallet, and the fund flow. After nearly 70 days of hard work, he identified the suspect's identity from the development code of the fake wallet app. Upon investigation, it was revealed that the gang developed a counterfeit app that slipped through the app store's security and enticed users to download it. With a cumulative download volume of tens of thousands of times, the case involved over a billion RMB, and ultimately, all five suspects were arrested and harshly punished by the law.

In February 2025, the server of a large-scale equipment design company in his jurisdiction was hit by a ransomware attack, encrypting over 400 GB of core design data over nearly a year. The company faced a risk of millions of RMB in breach of contract compensation. Guo Tingyu arrived at the scene, found a hidden backup in the disk, and after 8 hours of continuous work, successfully recovered all core data. Following this, he traced the virus files through server operation logs, pinpointing a foreign IP.

As of now, Guo Tingyu has been involved in solving 2 national-level cases and 6 provincial-level cases, continuously solving more than ten cases involving virtual currency crimes. When reviewing the cases, he said that all cybercrimes leave traces, and tech professionals should maintain a sense of awe towards technology, refraining from opening the Pandora's box of using technology for malicious purposes.