Build1 publisher3 min readPublished
Every control that failed in Orlen's $424m oil trade sat off-chain
Orlen's contractor converted $245m into USDT at Dubai companies and later handed 110m of it to a purported broker on two USB sticks. The Polish government's investigation pins the total lost and spent at $424m.
The Engineer · Build desk

What happened
- In 2023 Poland's state-backed Orlen energy group had $600m in hand to buy 6 million barrels of Venezuelan oil during a reprieve from the US-led sanctions that otherwise block dealings with the country.
- One Orlen executive decided it would be expedient to settle the purchase in the USDT stablecoin, priced at one dollar per token.
- Orlen handed the purchase to an external company, Hannon, which in turn enlisted UK firm Lexcor Energy, said to have a Venezuelan office.
- Hannon's representative Kam Tse travelled to Venezuela with a colleague, carrying the USDT on multiple cold wallets stored on USB sticks.
- Tse met many brokers claiming to represent state oil company PDVSA, a group later found to include a substantial number of con-men, many of whom fled once a local investigation began.
Compiled by The EngineerSomething wrong?How this is made
Why it matters
- constraint Identity verification binds a wallet only inside the exchange, and once value moves out to an OTC desk or a hand-carried wallet, an investigator has transaction hashes with no names attached to them.
- decision A team adding a stablecoin settlement leg has to decide who attests that a receiving wallet belongs to the entity on the contract. The payer is left to do that step itself.
- exposure Custody on USB sticks meant one bad handoff could move the entire carried balance, which here was 110m USDT.
- cost When the settlement leg stalls, the physical side pays. The three chartered tankers were held far past the term the charters assumed while conversions and handoffs dragged on.
Take the conversion leg by itself. Hannon exchanged $245m at multiple Dubai companies, having added $15m of its own to the deal, and came out holding 165m USDT [5][9]. That is $80m short, about a third of what went in, before anyone had flown to Venezuela [1]. One leg cleared at par: $80m became 80m USDT [6]. A $135m exchange produced 85m USDT, leaving $50m unaccounted for [7]. A $30m exchange vanished and much later gave back 21m USDT, roughly seventy cents on the dollar [8][19][3].
The biggest loss was a hand-to-hand transfer. Hannon's representative handed 60m USDT on one USB wallet to a purported representative of a local energy firm, Synergy [15]. What came back, after weeks, was a photograph of a purported PDVSA export schedule listing all three Polish tankers for 1.9m barrels each, with no predicted date [16]. Tse's team then handed the same representative another 50m USDT on a second USB wallet, and he vanished [17]. That is 110m USDT to one counterparty whose employer nobody had confirmed [2]. They had armored cars and bodyguards to protect the sticks [13].
Tom's Hardware, summarising a Financial Times account, argues the ledger was not the failure point: for most currencies the on-chain record gives more visibility into transactions, not less, and no official record linked the wallets to persons or entities [24][3]. Identity verification is mandatory at reputable exchanges [25], and it stops at the exchange boundary. By that account almost none of the entities Hannon traded with had recognizable proof that their wallets belonged to them [26]. The crude sellers then vanished; their disappearance closed off nearly every route for investigation [27], and they had earlier told Tse to keep no records of their transactions, citing a government investigation into their collective's dealings [28]. In Dubai, pending court cases over the dollar-to-USDT exchanges turn on the same gap between a wallet and its owner [29].
A counterparty who asks you to keep no records has already told you enough to walk away. I would have stopped there.
For a team wiring a stablecoin leg into a payment path, the controls this account puts in play are three: an ownership attestation binding a receiving wallet to a legal entity before value moves, split custody so no single traveller can transfer the whole balance, and delivery evidence a court would accept instead of a photograph.
The physical side paid for the delay. Three chartered Polish tankers sat anchored off Venezuela running up demurrage and port fees, held far longer than the charters assumed [10], and shipping came to $72m, more than the expected profit on the trade [23]. The total lost and spent is about 71 percent of the $600m Orlen had in hand at the start [4]. One ship loaded 500,000 barrels of fuel oil, half the contracted volume, after Tse paid the Venezuelan firm Consulting Services 11m USDT; a second 11m payment brought no delivery and no further contact [21][20][22]. The figures come from the Polish government's investigation, as reported by Tom's Hardware from the FT's reconstruction [23][3].
What to watch
- Whether Poland's investigation identifies who controlled the wallets that received the 110m USDT.
- Whether any of the USDT Hannon still held after the Dubai conversions is returned to Orlen.
- Whether Orlen or Hannon discloses what verification, if any, a counterparty wallet had to pass before a transfer.