@zachxbt ZachXBT

ZachXBT, a prominent investigator, has been tracking and exposing various cryptocurrency scams and exploits, including those linked to North Korean IT workers (DPRK ITWs). The investigations have led to multiple arrests, millions of dollars frozen, and the exposure of several scammers, including Crypto Beast, who rebranded as RealCryptoElio. Additionally, ZachXBT's work has highlighted the ongoing issue of DPRK ITWs being hired by companies, often due to a lack of proper due diligence, leading to significant financial losses.

Engagements: [------] #

• [--] Week [---------] +52%
• [--] Month [----------] +110%
• [--] Months [----------] +23%
• [--] Year [-----------] -43%

Mentions: [---] #

• [--] Week [---] +9.60%
• [--] Month [---] +21%
• [--] Months [---] +25%
• [--] Year [-----] -26%

Followers: [-------] #

• [--] Week [-------] +0.09%
• [--] Month [-------] +0.91%
• [--] Months [-------] +6.40%
• [--] Year [-------] +24%

CreatorRank: [-------] #

Social Influence

Social category influence cryptocurrencies #4899 finance 12.55% exchanges #1445 technology brands 7.84% stocks 5.49% social networks 5.49% countries 2.35% currencies 1.18% celebrities 1.18% automotive brands 0.78%

Social topic influence crypto #1091, in the 9.02%, address #349, ai 5.49%, john #2500, coinbase #230, share 4.31%, accounts #928, telegram #749, to the #5052

Top accounts mentioned or mentioned by @sexinfochina @kiennguyen @antihunter59823 @jerallaire @chironchain @polymarket @onlyzen @juan_25_q @daddywarbucks @scam_wipe @chain_traces @trytodomybest1 @grzes3939 @shadow_researc @geoffreywoo @mexcofficial @specteranalyst @wyckoffweb @ceazor7 @blugati

Top assets mentioned Coinbase Global Inc. (COIN) Ethereum (ETH) Solana (SOL)

Top Social Posts

Top posts by engagements in the last [--] hours

"when the biggest shills for a project come from sketchy KOLs (Nekoz etc) vs actual builders for a project it typically means the tech is underwhelming. nonetheless the supply control by them has so far been impressive L1s w/ token preproduct + large tax at launch for a serious project = pumping to insane valuation will always be funny mutes before angry holders appear"
X Link 2025-06-09T14:28Z 947.1K followers, 240.2K engagements

"1/ An investigation into the social engineering scammer Ronaldd (Ronald Spektor) who allegedly helped steal $6.5M last month from a single victim by impersonating Coinbase support"
X Link 2024-11-20T13:51Z 947.1K followers, 1.8M engagements

"1/ Over the past few months I have been tracking a series of related compromises for McDonalds Usher Kabosu Owner Andy Ayrey Wiz Khalifa SPX [----] etc on X & IG which has resulted in an estimated $3.5M+ stolen via launching Pump Fun meme coins"
X Link 2024-11-26T16:41Z 947.1K followers, 2.2M engagements

"@sama Scam Altman"
X Link 2026-02-04T20:31Z 947.1K followers, 102.4K engagements

"1/ Meet Haby (Havard) a Canadian threat actor who has stolen $2M+ via Coinbase support impersonation social engineering scams in the past year blowing the funds on rare social media usernames bottle service & gambling"
X Link 2025-12-29T14:36Z 947.1K followers, 1.1M engagements

"The reason is World primarily targeted less developed countries where the airdrop allocation was more valuable in exchange for risking your biometric data. What happens when verified humans from developing countries spam AI slop / sybil globally due to financial incentives exactly the same as bots do InfoFi has amplified this unsolved problem. People claiming airdrops or performing tasks for financial incentives does not make it the #1 wallet globally. https://twitter.com/i/web/status/2013180704528715968 https://twitter.com/i/web/status/2013180704528715968"
X Link 2026-01-19T09:24Z 947.1K followers, 38K engagements

"1/ Meet the threat actor John (Lick) who was caught flexing $23M in a wallet address directly tied to $90M+ in suspected thefts from the US Government in [----] and multiple other unidentified victims from Nov [----] to Dec 2025"
X Link 2026-01-23T13:02Z 947.1K followers, 1.9M engagements

"4/ In part [--] of the recording Dritan continues to mock John while another $6.7M worth of ETH is moved into the wallet address below: 0xd8bc7ea538c2e9f178a18cc148892ae914a55d08"
X Link 2026-01-23T13:02Z 947.1K followers, 380.3K engagements

"@FFVV1211 @Polymarket Coincidentally it comes only a few days after Logan Paul promoted Polymarket inorganically in a YT video"
X Link 2026-02-09T12:44Z 947.1K followers, 54.1K engagements

"@geoffreywoo @AntiHunter59823 There is 0% rug pull risk. -Guy partnered with the Paul brothers"
X Link 2026-02-13T14:18Z 947.1K followers, 251.3K engagements

"The threshold for most firms is $100K at minimum otherwise it is near impossible to get law enforcement (LE) assigned to a case. Say you lost $10. I get the stolen funds frozen at a service or exchange. No LE is willing to work that case and no lawyer is either. Theres literally nothing I could possibly do in that scenario to get the funds returned. BUT if you lost $10 and theres hundreds of other victims and the total is $100K+ you have a better chance of someone taking the case. Its just the unfortunate reality of the world. When you receive 30+ requests for help per day as a single person"
X Link 2026-02-06T19:32Z 947.1K followers, 162.8K engagements

"@web3tokenomics @Polymarket And the entire interaction was organically caught on video Got it"
X Link 2026-02-09T12:18Z 947.1K followers, 20.9K engagements

"@bogdikery @Polymarket Still zero balance"
X Link 2026-02-09T12:55Z 947.1K followers, 26.4K engagements

"@damselincrypto @Polymarket theres at least some sort of relationship not being disclosed @FFVV1211 @Polymarket Coincidentally it comes only a few days after Logan Paul promoted Polymarket inorganically in a YT video. https://t.co/ayhcBL8HCz @FFVV1211 @Polymarket Coincidentally it comes only a few days after Logan Paul promoted Polymarket inorganically in a YT video. https://t.co/ayhcBL8HCz"
X Link 2026-02-09T13:11Z 947.1K followers, 28.7K engagements

"@sexinfochina @OnlyZen @THORSwap @avax @SwapKitPowered @NEARProtocol @near_intents @AlexAuroraDev Last time you made up the same lie Meanwhile you flex owning two Rolls Royce cars at a large villa"
X Link 2026-02-14T03:15Z 947.1K followers, 10.2K engagements

"Another day another influencer @DannyCrypt dumping on their followers undisclosed He received 2% of the supply to assist with marketing but within [--] minutes of receiving the tokens market dumped the majority of them for $57k (31 ETH) Meanwhile he tweeted hodling my HODL coin"
X Link 2023-05-10T19:08Z 947.1K followers, 2.6M engagements

"1/ Its unfortunate I have to make this thread but I am being sued by MachiBigBrother for an article I published in June [----]. Today Machi filed the defamation lawsuit. The lawsuit is baseless and an attempt to chill free speech. I intend to fight back & defend free speech"
X Link 2023-06-16T19:07Z 947.1K followers, 8.7M engagements

"1/ Throughout this year I have been monitoring someone who has withdrawn 11200+ ETH ($25M) from Tornado Cash and spent the majority of it on Magic The Gathering (MTG) trading cards. Heres my analysis of where the funds went and what the potential source of funds could be"
X Link 2023-12-07T15:53Z 947.1K followers, 3.3M engagements

"Only [--] month has passed and [--] of the Solana presale meme coins have been completely abandoned after raising [------] SOL ($26.7M). Would avoid any future projects launched by these founders. I was interested to see how much SOL has been sent as a result of the presale meta and calculated [------] SOL ($122.5M) raised from [--] presales. https://t.co/dvsW4TSoov I was interested to see how much SOL has been sent as a result of the presale meta and calculated [------] SOL ($122.5M) raised from [--] presales. https://t.co/dvsW4TSoov"
X Link 2024-04-21T19:31Z 947.1K followers, 1.3M engagements

"1/ How Lazarus Group laundered $200M from 25+ crypto hacks to fiat from [----] - [----] https://zachxbt.mirror.xyz/B0-UJtxN41cJhpPtKv0v2LZ8u-0PwZ4ecMPEdX4l8vE https://zachxbt.mirror.xyz/B0-UJtxN41cJhpPtKv0v2LZ8u-0PwZ4ecMPEdX4l8vE"
X Link 2024-04-29T13:19Z 947.1K followers, 2.9M engagements

"7/ Greavys (Malone) lives a flashy lifestyle with the stolen funds having purchased 10+ cars and going out to clubs in LA and Miami with friends spending $250K-500K / night and giving out Birkin bags to girls. During video clips and in chats multiple people refer to him as Malone and was flexing stolen funds on Discord. Currently $3.5M tied to Greavys sits here 0x21d7d256be564191a43553e574c06a4d0e629767"
X Link 2024-09-19T13:05Z 947.1K followers, 1.1M engagements

"In April [----] an elderly victim from the US was targeted by Indian call scammers posing as Coinbase support resulting in a large portion of their life savings stolen. Pleased to share that I helped recover $275K which was recently seized and will be sent back to them. Theft txn hash 30125031d32a3a2ec9a6963d218bf2494d4392d9444586061a97d84511479346 During my research I found $5M+ stolen from other victims of this group which were laundered from Ethereum/Bitcoin to Tron via centralized exchanges before stablecoins were transferred to OTCs"
X Link 2024-10-07T12:08Z 947.1K followers, 637.9K engagements

"1/ Meet Yicong Wang () a Chinese OTC trader who has helped Lazarus Group convert tens of millions of stolen crypto to cash from various hacks via bank transfers since 2022"
X Link 2024-10-23T12:51Z 947.1K followers, 1.4M engagements

"1/ An investigation into the alleged identity of the mysterious Hyperliquid whale tied to illicit activity that profited $20M via highly leveraged positions over the past couple weeks"
X Link 2025-03-20T13:25Z 947.1K followers, 2.6M engagements

"Update: Wiz (Veer Chetal) was arrested by US Marshalls and here is his mug shot"
X Link 2025-03-25T17:10Z 947.1K followers, 480K engagements

"Nine hours ago a suspicious transfer was made from a potential victim for [----] BTC ($330.7M) Theft address bc1qcrypchnrdx87jnal5e5m849fw460t4gk7vz55g Shortly after the funds began to be laundered via 6+ instant exchanges and was swapped for XMR causing the XMR price to spike 50%"
X Link 2025-04-28T07:30Z 947.1K followers, 3.5M engagements

"1/ My recent investigation uncovered more than $16.58M in payments since January [--] [----] or $2.76M per month has been sent to North Korean IT workers hired as developers at various projects & companies. To put this in perspective payments range from $3K-8K per month meaning they have infiltrated [---] jobs on the low end or [---] jobs on the high end"
X Link 2025-07-02T12:35Z 947.1K followers, 1.2M engagements

"@MEXC_Official @Gate_io Update: Ildar Ilham aka @XBT_Prometheus (founder of @WhiteRock_Fi) was arrested by UAE law enforcement for his involvement in the $30M Zkasino exit scam. He will be extradited to the Netherlands next for the criminal case"
X Link 2025-07-03T13:38Z 947.1K followers, 372.6K engagements

"The affidavit confirmed all of the victims from my investigation Victim [--] = Beeple Victim [--] = DeeKay Victim [--] = Zeneca Victim [--] = Nouns DAO Victim [--] = JRNY Club 7/ The hacked Twitter accounts lead to millions of dollars worth of crypto stolen in total. This table shows a rough estimate for the amount of crypto stolen with each account in the Tweet above. https://t.co/DEzL3tmnmk 7/ The hacked Twitter accounts lead to millions of dollars worth of crypto stolen in total. This table shows a rough estimate for the amount of crypto stolen with each account in the Tweet above. https://t.co/DEzL3tmnmk"
X Link 2025-07-30T11:57Z 947.1K followers, 164.5K engagements

"On Aug [--] [----] a victim fell for a social engineering scam and lost [---] BTC ($91M) after exchange and hardware wallet customer support were impersonated. The stolen funds began to peel off and deposits to Wasabi were made by the threat actor. Coincidentally this theft happened on the one year anniversary of the $243M Genesis Creditor theft. Theft txn hash da598f2a941ee3c249a3c11e5e171e186a08900012f6aad26e6d11b8e8816457 Theft address bc1qyxyk4qgyrkx4rjwsuevug04wahdk6uf95mqlej"
X Link 2025-08-21T17:33Z 947.1K followers, 719.6K engagements

"This week the project @OpenVPP ($OVPP) claimed to be working with the US government on the tokenization of energy. [--] hrs ago Hester Pierce replied saying she does not work alongside or endorse private crypto projects. OpenVPP then hid her reply from the post. I reviewed the accounts promoting OpenVPP and its the usual influencer suspects. https://twitter.com/i/web/status/1968338476027580483 https://twitter.com/i/web/status/1968338476027580483"
X Link 2025-09-17T15:37Z 947.1K followers, 817.2K engagements

"5/ I contacted the Zashi team and they informed me they plan to solve this privacy issue by adding ephemeral addresses soon and eventually shielded Near Intent refunds. In the meantime I suggest using multiple seeds on separate devices if you use Near Intent integration for Crosspay transfers using your shielded ZEC balance. Overall I still think Zashi is an enjoyable wallet experience for privacy and fixes several UI/UX complaints I had for Monero"
X Link 2025-10-21T12:28Z 947.1K followers, 288.3K engagements

"Anyone else have stablecoin ticker fatigue Imagine you receive USDPT to your Solana address but realize your wallet doesnt have USDPT on default token list. You also need gas so you bridge ETH from Ethereum and wait several minutes and want to swap USDPT for USD on CEX but your preferred CEX doesnt support USDPT so you swap on chain for USDT but realize the CEX conversion for USDT to USD is not 1:1 on Solana and wire transfer takes days so you bridge to Tron and realize you dont have TRX so you bridge gas from SOL but realize the bridge has a minimum so you bridge more ETH. Your MetaMask"
X Link 2025-10-31T10:52Z 947.1K followers, 262.7K engagements

"9/ Additional screenshots taken from his IG show off more social engineering thefts. One story post leaked "From "Harvi's MacBook Air" A person from their chat even advised him to stop flexing so often"
X Link 2025-12-29T14:36Z 947.1K followers, 109.3K engagements

"10/ Haby regularly posts stories and selfies flaunting his lifestyle with little regard for opsec and was also caught simping for eGirls"
X Link 2025-12-29T14:36Z 947.1K followers, 118.1K engagements

"@tayvano_ Hearing rumors from trusted sources that MM spent its entire budget on developing this piece of art for its new AI slop marketing campaign I have uninstalled MM as safety precaution Stay safe CT"
X Link 2026-02-06T16:36Z 947.1K followers, 61.2K engagements

"1/ The UK scammer @ape_31 @60711 has stolen more than $650K from 250+ X users in the past year by posting fake PNL screenshots from a Bybit demo account and running a news account to funnel unsuspecting victims into paid services before blocking them upon receiving payment"
X Link 2024-09-30T13:44Z 947.1K followers, 1.9M engagements

"1/ An investigation into Faris Ali (Zay/Tommy) from the UK and his alleged involvement in robbing an X user out of $4.3M in June [----] during a home invasion as the result of a crypto data breach. https://www.blogdelnarco.org/2024/12/ejecutan-en-su-mercedes-benz-y-al-salir.html https://www.blogdelnarco.org/2024/12/ejecutan-en-su-mercedes-benz-y-al-salir.html"
X Link 2024-10-10T13:30Z 947.1K followers, 2M engagements

"7/ I think the risk of a rug with WhiteRock remains high due to their history with other projects (Zkasino Syncus Zigzag). I hope @MEXC_Official @Gate_io considers delisting WHITE and also conduct enhanced due diligence on the team. As the Zkasino team awaits trial hopefully soon Ildar Ilham Elham Nourzai & Lior Ben Zakan face serious legal repercussions for all of the harm they have caused to investors. https://twitter.com/i/web/status/1934616688928113045 https://twitter.com/i/web/status/1934616688928113045"
X Link 2025-06-16T14:18Z 947.1K followers, 169.9K engagements

"1/ Multiple projects tied to Pepe creator Matt Furie & ChainSaw as well as another project Favrr were exploited in the past week which resulted in $1M stolen My analysis links both attacks to the same cluster of DPRK IT workers who were likely accidentally hired as developers"
X Link 2025-06-27T14:02Z 947.1K followers, 880.2K engagements

"1/ An investigation into how @cryptobeastreal scammed followers by lying they were not behind the $190M - $3M $ALT market cap crash where 45+ connected insider wallets sold $11M+ on July [--] 2025"
X Link 2025-07-22T12:53Z 947.1K followers, 1.3M engagements

"NEW LEAK: Price sheet of 200+ crypto influencers and their wallet addresses from a project they were recently contacted by to promote. From 160+ accounts who accepted the deal I only saw [--] accounts actually disclose the promotional posts as an advertisement"
X Link 2025-09-01T11:59Z 947.1K followers, 7.8M engagements

"1/ An investigation into how I identified one of suspects tied to the $28M Bittensor hack from [----] by identifying anime NFT wash trades linked to a former employee and earned a whitehat bounty for my efforts"
X Link 2025-10-15T14:19Z 947.1K followers, 472K engagements

"@serpinxbt I worked with @shob10_ to compare the 70K InfoFi users from the [--] platforms to their X account location and here were the results:"
X Link 2025-12-10T15:43Z 947.1K followers, 718.5K engagements

"Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & other contact information). Earlier today customers received the email below"
X Link 2026-01-05T11:30Z 947.1K followers, 1.2M engagements

"Let me rephrase: Ledger a French security company has been breached multiple times which resulted in its customers private data being leaked has lead to targeted thefts and millions stolen. Current products have major issue like the battery for the Ledger Nano X. Now Ledger plans to max extract more via US IPO after recently announcing they will also charge a % for clear signing. https://twitter.com/i/web/status/2014619383294001655 https://twitter.com/i/web/status/2014619383294001655"
X Link 2026-01-23T08:41Z 947.1K followers, 123.1K engagements

"@Polymarket Yet another Logan Paul scam Why do all of the prediction market teams have to run deceptive marketing"
X Link 2026-02-09T12:04Z 947.1K followers, 414.1K engagements

"@sumsub A bit tone deaf to publish an article on other company incidents when Sumsub just disclosed a threat actor had access to sensitive data that went undetected for [---] yrs"
X Link 2026-02-09T14:18Z 947.1K followers, 140.1K engagements

"@kickzeth Scammer He didn't just steal from creators and scam Projects but. It turns out he also stole from fellow KOL Managers. I spent [--] weeks chasing @kickzeth for money he owed me for creator work. But once I started asking fellow creators it seemed like I wasn't alone in this. So I https://t.co/gLFyPSp8WD He didn't just steal from creators and scam Projects but. It turns out he also stole from fellow KOL Managers. I spent [--] weeks chasing @kickzeth for money he owed me for creator work. But once I started asking fellow creators it seemed like I wasn't alone in this. So I"
X Link 2026-02-10T03:22Z 947.1K followers, 96.1K engagements

"@StyloIRL @TedPillows becomes funnier when you also realize Ted Pillows does not understand how to trade onchain and willingly pays Phantom Wallet 0.85% fees for swaps instead of visiting a Solana DEX site directly"
X Link 2026-02-12T14:22Z 947.1K followers, [----] engagements

"@ssh_louis @sethsetse Countries where it is economically viable to spam AI slop for incentives / ad revenue due to lower wages"
X Link 2026-02-13T09:52Z 947.1K followers, [----] engagements

"@geoffreywoo @AntiHunter59823 its all good the bot placed the sells not the dev"
X Link 2026-02-13T14:22Z 947.1K followers, 24.8K engagements

"Conveniently left out the fact that you are a cyber criminal that operates the Chinese darknet market FreeCity You openly advertise illicit services such as human trafficking / hitman openly on Telegram. You also have knowingly laundered 5+ hacks for DPRK as their OTC. I also know youre aware as two years ago you asked me to check why a CEX account got frozen and it traced back onchain to a [--] figure DPRK heist. @sexinfochina @cuntycakes123 @MEXC_Official You openly promote an illicit Chinese online marketplace on TG that advertises hitman stolen government IDs breaches and more Yours was"
X Link 2026-02-14T02:38Z 947.1K followers, 62.8K engagements

"@zoomerfied Heres the Figure co-founder last month"
X Link 2026-02-14T03:24Z 947.1K followers, 29.9K engagements

"Referring to a meme coin using my likeness that I did NOT create did NOT promote and was sent to my public donation address. While you are upset simply because I replied about [--] / [--] of the new microcap coins you promote to your followers every day having an association to the Paul brothers. ZachXBT and the $3.9M Meme Token Saga: Hero or Villain Many hail ZachXBT as a hero while others claim hes living long enough to become a villain. Lets uncover the truth behind the controversy. #ZachXBT #Thread https://t.co/GJQOzKsSC0 ZachXBT and the $3.9M Meme Token Saga: Hero or Villain Many hail ZachXBT"
X Link 2026-02-14T08:41Z 947.1K followers, 112.5K engagements

"@petranto @KienNguyen Grok summarizes the post well Same thing that has happened for years: KOLs upset when I comment about one of their bags @KienNguyen @zachxbt https://t.co/bVKf0PIQcR @KienNguyen @zachxbt https://t.co/bVKf0PIQcR"
X Link 2026-02-14T08:54Z 947.1K followers, [----] engagements

"@nikitabier @santisiri @steipete @openclaw Please end the claim your fees meta"
X Link 2026-02-14T09:09Z 947.1K followers, 55.5K engagements

"1/ An investigation into how Greavys (Malone Iam) Wiz (Veer Chetal) and Box (Jeandiel Serrano) stole $243M from a single person last month in a highly sophisticated social engineering attack and my efforts which have helped lead to multiple arrests and millions frozen"
X Link 2024-09-19T13:03Z 947.1K followers, 13.3M engagements

"1/ An unnamed source recently compromised a DPRK IT worker device which provided insights into how a small team of five ITWs operated 30+ fake identities with government IDs and purchased Upwork/LinkedIn accounts to obtain developer jobs at projects"
X Link 2025-08-13T12:54Z 947.1K followers, 1.1M engagements

"@CarlotaFang77 @EmanAbio Nearly [---] yrs has passed since these replies and the Sui ecosystem could not implement column filters or other basic features"
X Link 2026-02-15T17:55Z 947.1K followers, 27.1K engagements

"Logan Paul thread coming Friday"
X Link 2022-05-12T00:18Z 947K followers, [----] engagements

"1/ Heres a thread on some of the public figures in the Web [--] space that deserve large fines and potentially jail time for creating or promoting multiple crypto/NFT scams. [--] @FloydMayweather [--] @jakepaul [--] @souljaboy [--] @lindsaylohan [--] @jayalvarrez [--] @lilyachty [--] @LoganPaul"
X Link 2022-06-04T18:48Z 947K followers, 11.8K engagements

"damn dillon danis is a scumbag feel bad for everyone he scammed"
X Link 2022-12-24T16:11Z 947K followers, 1.9M engagements

"Sad to see @MEE6NFT soft rug buyers after collecting $3m (965 ETH) less than a year ago with many roadmap items left unfinished or the future unclear. Not to mention negligence by their team with @mee6bot last year lead to [--] figures in losses where victims were not reimbursed"
X Link 2023-02-13T16:53Z 946.9K followers, 300.2K engagements

"6/ EX 3: For this one Raichu worked with rapper Rich The Kid for the project Ancient Cats Club. The team quickly rugged shortly after launch stealing over $1.7m. The team of this project eventually launched other NFT scams like Bored Bunny and Rich Dwarves Tribe. 2/ On 4/21 the proceeds were transferred away to 0x53 and 0x7c. Well 0x53 sends them to 0x1c which has received money from -Ancient Cats Club ($1.7m rug) -Rich Dwarves Tribe ($3.2m rug) -Bored Bunny ($21m slow rug) https://t.co/MhJ56Tgh24 2/ On 4/21 the proceeds were transferred away to 0x53 and 0x7c. Well 0x53 sends them to 0x1c"
X Link 2023-04-05T13:06Z 946.9K followers, 87.5K engagements

"Over the past [---] months one person has created [---] meme coin scams. Each time stolen funds from the scam are sent to the exact same deposit address. 0x739c58807B99Cb274f6FD96B10194202b8EEfB47"
X Link 2023-04-26T14:56Z 947K followers, 1.9M engagements

"Update: Atomic Wallet Hack appears to potentially have been done by Lazarus Group/DPRK (seeing lots of similarities in the laundering patterns to Ronin + Harmony)"
X Link 2023-06-06T16:12Z 947K followers, 144.1K engagements

"A class action lawsuit was filed in Canada against the Boneheads team for the $3.1M NFT rug pull The team quickly disappeared and spent the mint funds on BAYCs luxury goods and other items never fulfilling the roadmap Yet another case where my research has been cited 1/ Investigating the $3.1m rug pull @BONEHEADS and the breadcrumbs left behind by the team into how the money has actually been spent. 1/ Investigating the $3.1m rug pull @BONEHEADS and the breadcrumbs left behind by the team into how the money has actually been spent"
X Link 2023-07-07T15:21Z 946.7K followers, 488K engagements

"Thanks @DwightHoward for the quick rug pull"
X Link 2024-01-30T22:54Z 946.6K followers, 515.5K engagements

"In May [----] the rank [--] DeGods NFT was stolen from a victim after visiting a phishing site and sold for $177K (99 ETH). I am pleased to share I was able to help recover a decent chunk of the stolen funds which have now been returned back to the victim. While recovery can be a lengthy process it does happen and I am always happy to share these success stories. https://twitter.com/i/web/status/1761346473340657773 https://twitter.com/i/web/status/1761346473340657773"
X Link 2024-02-24T11:04Z 947K followers, 598.2K engagements

"30.1K BTC ($2.1B) of Silk Road hack funds controlled by US government is on the move right now. [-----] BTC ($69) transferred to a Coinbase deposit address so its a test transfer possibly. txn hash 9c3af4b48e66565f1da1da8278036fa1dbb09f2beaaca99c3504475390ba4590 Coinbase deposit address 3KrZVU9Jz4UKHpKUtuvkEMX1tY8zeiTvX2"
X Link 2024-04-02T16:06Z 947K followers, 2.5M engagements

"I have been borderline harassed by @IRS_CI agents on 4-5 occasions now in the past few months with a blatant disregard for any professionalism so I have decided to now share this publicly. They have shown up irl to old addresses contacted personal emails using private data and have sent mail when I have public contact methods readily available. I have always been willing to support victims of scams with documentation needed by law enforcement to aid cases but if you overstep personal boundaries why would I want to assist you"
X Link 2024-04-05T16:14Z 947K followers, 1.1M engagements

"Unfollow and block all of the influencers who were shilling you any of these vaporware projects to you as the next bluechip (@CryptoGodJohn @TheCryptoKazi @crypto_TomTom @cryptostasher etc) $scale - ScaliaInfra (-95.3% 24hrs) $tpu - TensorSpace_Ai (-96.3% [--] hrs) $ntd - NTensorDynamics (-97.4% 24hrs) $zkml - ZKMLsystems (-70.6% 24hrs) The same influencers will continue shilling garbage to you throughout the cycle"
X Link 2024-04-13T20:09Z 947K followers, 1.5M engagements

"coming from the clown who runs a call channel to do undisclosed shills and pump and dump meme coins on followers. influencers like you who contribute absolutely nothing and only extract are why this space sucks. guess the $800K+ profited from the bundle does not matter or that the founder is sketchy"
X Link 2024-05-25T01:32Z 947K followers, 20.8M engagements

"DPRK IT workers are typically easy to spot and are not the smartest individuals. Example: Light Fury (@lee_chienhui) is a DPRK IT worker who transferred $300K+ from his public ENS address to Kim Sang Man who is on the OFAC sanctions list. Fake Name: Gary Lee Alias: Light Fury GitHub: Light-Fury Telegram: leech_dev Number: +1 [---] [---] [----] Alias email: leech.developer@gmail.com Wallet address lightfury.eth 0xe8A06462628b49eb70DBF114EA510EB3BbBDf559 NEW: NORTH KOREAN NATIONALS ARE APPLYING FOR CRYPTO JOBS TO INFILTRATE PROJECTS FOR NEFARIOUS PURPOSES - PER @dlnews https://t.co/gfzEDCJIjp NEW:"
X Link 2024-07-15T14:26Z 946.6K followers, 419.1K engagements

"1/ So I began tracing the $230M+ WazirX hack back from the original exploiter address and was able to make some interesting observations. 📢 Update: We're aware that one of our multisig wallets has experienced a security breach. Our team is actively investigating the incident. To ensure the safety of your assets INR and crypto withdrawals will be temporarily paused. Thank you for your patience and understanding. 📢 Update: We're aware that one of our multisig wallets has experienced a security breach. Our team is actively investigating the incident. To ensure the safety of your assets INR and"
X Link 2024-07-18T11:19Z 946.7K followers, 1.4M engagements

"@bitforexcom 1) What"
X Link 2024-07-19T15:02Z 946.8K followers, 22.3K engagements

"One of my best investigations of all time will be posted within the next [--] hrs related to an $100M+ incident"
X Link 2024-09-19T08:47Z 947K followers, 837.9K engagements

"Heres a long list of [--] NFT projects I did investigations on: Animoon - $6.3M Winter Bears - $3.4M [---] projects - $13M Rogue Society - $5.5M Rich Dwarves Tribe - $3.04M Boneheads - $3.1M Real Floyd NFT - $5M Croatia NFT scam group - $2.8M Rich Bulls Clubs - $3.4M MEE6 - $3M Eternal Beings - $4M Ether Monkeys - $2.8M Swipa The Fox - $1.75M Tribes of Ogun - $700K Billionaire Dogs Club - $960K Crazy Camels - $1.6M Rich Kids - $2M Fashion Ape - $1.1M Trollz- $4M Various NFT projects - $3.7M Players Only - $1.4M Vault of gems - $1M 0xCryatals - $1M Miss Universe - $370K Apes In Space - $10.8M"
X Link 2024-10-12T20:17Z 946.8K followers, 63K engagements

"1/ A short story about how the influencer @edgeville got caught lying to the community three times this weekend about an allocation for a project all for $2.2K"
X Link 2024-10-20T15:47Z 947K followers, 1.1M engagements

"4/ Recently they reached back out after having been approached by Yicong Wang for a larger USDT - CNY order on August [--] [----] involving 1.5M USDT at a rate much lower than the market rate. THjaAygUNkzoXufwEoKCzbUZHpsehL9rAZ"
X Link 2024-10-23T12:51Z 946.7K followers, 83.4K engagements

"5/ When reviewing blockchain data tied to Yicong Wang you will notice high illicit fund exposure from the Alex Labs Irys co-founder and a consolidation of other hacks (EasyFi Bondly Maverick co-founder etc)"
X Link 2024-10-23T12:51Z 946.7K followers, 84.3K engagements

"7/ Alex Labs was hacked for $4.5M in May [----] by Lazarus Group. One of the theft addresses deposited [---] ETH to a privacy protocol on June [--] [----] 0xc0a0ec4dbf170611cc76f31a9df910ad79bc2266 Matching amounts were withdrawn the same day to two addresses 0x9fc1350f80734044b7189fe7b8f288396f76feb5 0x21c926a1a328a4906feeb18664d00f3d85df1aed Another theft address deposited [---] ETH from June 27-28th 0x1871bb6257b1f622548ef64a12ae5149eb208bd8 Shortly after a matching amount was withdrawn commingling with the Irys co-founder stolen funds. 0xddb2e9feaf0a122b43be14bc085cf713703ce45c On August 13th funds"
X Link 2024-10-23T12:51Z 946.7K followers, 103.7K engagements

"@FatManTerra Finally they got that OTC scammer He stole $7.1M (14.6K TAO) from a TAO whale in February [----] Also scammed ZYN MOG Kondux Ordiswap Landwolf and Hash AI whales for another $8M+ all this year. Looks like someone got scammed a few hours ago for 45M $OX ($600k). Previously it looks like this person had bought $4.4M of $OX from Sifu. Basically this person got scammed for tokens purchased from scammer of project created by scammer. https://t.co/QxcLm1vofF Looks like someone got scammed a few hours ago for 45M $OX ($600k). Previously it looks like this person had bought $4.4M of $OX"
X Link 2024-12-03T17:57Z 946.9K followers, 75.6K engagements

"@arkham @benbybit @Bybit_Official My submission has been sent identifying the organization behind the attack using on-chain data"
X Link 2025-02-21T19:30Z 947K followers, 428.6K engagements

"Today when laundering funds for the Bybit Hack the Poloniex hack was also linked on-chain in consolidation address 0x15ec. This now shows the same entity is tied to four different hacks (Bybit Poloniex Phemex BingX) Overlap 0x15ec300a4895a86322f1a27dd9ba0b9f8297e65d Bybit Hack 0x83c7678492d623fb98834f0fbcb2e7b7f5af8950 0x96244d83dc15d36847c35209bbdc5bdde9bec3d8 Poloniex Hack 0xa0495b9421b0e81479b5271a041c9f28fc555800"
X Link 2025-02-24T12:39Z 947K followers, 252.7K engagements

"2/ A trader opened multiple highly leveraged positions on Hyperliquid and GMX from Jan - Mar [----]. They gained lots of attention this month after two onchain trades: -Large ETH & BTC long position on 50X leverage just before Trumps crypto reserve announcement by 0xe4d3 ($10M profit) -Large BTC short position on 40X leverage by 0xf3F4 ($9M profit)"
X Link 2025-03-20T13:25Z 946.7K followers, 243.1K engagements

"3/ I went and identified the main counterparties of 0xf3f: 0x7ab8c59db7b959bb8c3481d5b9836dfbc939af21 0x312f8282f68e17e33b8edde9b52909a77c75d950 0xab3067c58811ade7aa17b58808db3b4c2e86f603 0xe4d31c2541a9ce596419879b1a46ffc7cd202c62 This cluster is to tied to Roobet Binance Gamdom ChangeNOW Shuffle Alphapo BC Game & Metawin accounts. https://twitter.com/i/web/status/1902713054908846248 https://twitter.com/i/web/status/1902713054908846248"
X Link 2025-03-20T13:25Z 946.3K followers, 236.2K engagements

"@TheNotoriousMMA @getrealtoken"
X Link 2025-04-05T16:27Z 947K followers, 173.8K engagements

"Your team stole $30M of investor funds from Zkasino and you were arrested. After those millions were gambled away via Hyperliquid/GMX leveraged positions and laundered the via instant exchanges and crypto to cash OTCs over the past few months. Elham Nourzai if there was a tier list for CT scammers you would be at the top"
X Link 2025-04-07T07:58Z 947K followers, 230.5K engagements

"@satoshivm From SAVM shilled by many influencers last year at TGE to one year later no social media activity on X/TG no Github activity in months and token down 99%. Who could have possibly seen this coming"
X Link 2025-04-19T10:06Z 946.7K followers, 63.6K engagements

"@jessepollak all of these viral coins yet not even a single $5M+ runner"
X Link 2025-04-21T15:46Z 946.8K followers, 161.1K engagements

"@JamesWynnReal (_) ___( _) I trust you James Wynn _ _"
X Link 2025-06-02T14:01Z 947K followers, 291.5K engagements

"@elonmusk Please update DMs & XChat by adding a filter to choose who can add you to group chats. Currently any user can add you to a group unless you turn off your messages entirely"
X Link 2025-06-16T05:17Z 947K followers, 880K engagements

"6/ An unnamed source provided a personal email of an account that interacted multiple time with the WhiteRock deployer address. I noticed the email has an account on Chess(.)com with the username IldarTheGrandMaster. Prometheus from Zkasino = Ildar Whiterock alias = Goedel goedel014@gmail(.)com"
X Link 2025-06-16T14:18Z 946.9K followers, 100.1K engagements

"@memenetic POV your new meme coin grift is destined for failure due to influencer bukkake 150+ promotional posts from d-tier influencers millions of botted followers and likes only [--] SOL raised for the presale few disclosures for the posts"
X Link 2025-08-23T12:52Z 947K followers, 123.9K engagements

"@web3 Community alert: @web3 is linked to a team member of the Squiggles NFT rug and Raichu who I previously post about 1/ Ever wonder who connected projects with the celebrities and influencers that promote crypto scams Heres a breakdown on one of the people doing it known as Raichu (Ryan). https://t.co/uzrEZ1pAvX 1/ Ever wonder who connected projects with the celebrities and influencers that promote crypto scams Heres a breakdown on one of the people doing it known as Raichu (Ryan). https://t.co/uzrEZ1pAvX"
X Link 2025-08-28T10:34Z 946.3K followers, 161.9K engagements

"@inversebrah These botted milady meme coin KOL scammer accounts that keep appearing out of nowhere are so annoying"
X Link 2025-09-07T10:18Z 947K followers, 42K engagements

"@lookonchain @jpthor Also in a recent documentary about the Bybit hack in an interview he defended DPRKs right to hack/exploit teams"
X Link 2025-09-12T09:05Z 946.6K followers, 52.4K engagements

"@ICEBOYBILL @OpenVPP Same influencers who were pushing the depin / ai / gpu tax farms earlier this cycle"
X Link 2025-09-17T15:42Z 946.9K followers, 12.3K engagements

"@Cointelegraph @forsetis_anon Does the Countelegraph team vet sponsors An old Brian Krebs investigation named the Ice Blockchain / Online CEO Alexandru Florea (Zeus) as a cybercrinimal that was the admin of Microleaves a service that was alleged malware/botnet and linked to the [----] ICO rug OIO"
X Link 2025-10-08T09:56Z 946.7K followers, 33.9K engagements

"@elbrys @Cointelegraph @forsetis_anon heres the article for reference https://krebsonsecurity.com/2022/07/breach-exposes-users-of-microleaves-proxy-service/ https://krebsonsecurity.com/2022/07/breach-exposes-users-of-microleaves-proxy-service/"
X Link 2025-10-08T10:06Z 946.7K followers, [----] engagements

"@SpecterAnalyst @Cointelegraph @forsetis_anon Inb4 the Ice team sends their bots to defend them in the replies @ElonMuskAPO @ForeverCurtis_ @IamNomad @ice_blockchain I am sorry but this is an obvious grift to anyone who does basic due diligence. Ultimately this space has people who will fall for a scam regardless and are not worth my time helping. The followers are botted and engagement is not real. https://t.co/LBdnJByaxv @ElonMuskAPO @ForeverCurtis_ @IamNomad @ice_blockchain I am sorry but this is an obvious grift to anyone who does basic due diligence. Ultimately this space has people who"
X Link 2025-10-08T10:07Z 946.7K followers, [----] engagements

"@Cointelegraph Smoking crack is likely safer than trusting WazirX"
X Link 2025-10-24T19:59Z 946.9K followers, 123.7K engagements

"i did not call Vultisig a scam i called out the founder for his history of negligence and lack of morals: ThorFi [--] fig rug via admin key Explicit refusal to return any fees generated on his products from illicit activity (Thorchain Vultisig etc) Associated projects hired DPRK IT workers Personal wallets hacked by DPRK malware after a meeting call scam via Telegram if theres ever any future incidents that are material enough you can be certain he will avoid taking full responsibility https://twitter.com/i/web/status/1982068479466652029 https://twitter.com/i/web/status/1982068479466652029"
X Link 2025-10-25T12:55Z 946.9K followers, 41.8K engagements

"@patriotsounds @TegiXBT The victims were not provided full compensation by TCY and admin mimir was done unilaterally. A class action lawsuit was even organized by multiple victims as a result of the negligence"
X Link 2025-10-25T13:38Z 946.9K followers, [----] engagements

"@hammerfrog64 rip"
X Link 2025-10-28T17:29Z 946.7K followers, 26.3K engagements

"@cecilia_hsueh @TheWhiteWhaleV2 @MEXC_Official Vendor: How many bots do you want MEXC exec: All of them"
X Link 2025-10-30T15:36Z 946.7K followers, 259.2K engagements

"@BNBCHAIN Thanks I look forward to publishing my upcoming investigation into an exploit"
X Link 2025-11-05T12:01Z 946.9K followers, 38.9K engagements

"@zoomerfied Isnt Basic Markets TedTalksMacros TraderSkews & CryptoBooles project"
X Link 2025-11-20T15:20Z 946.7K followers, 55.9K engagements

"@inversebrah We will collectively block the hundreds of thousands of InfoFi farmers that spam AI slop replies. I support scamming suspending draining or breaching dbs for all of them. Make CT great again"
X Link 2025-12-12T06:47Z 946.8K followers, 79.6K engagements

"Yes $6M+ stolen at minimum from hundreds of Trust Wallet users. Hopefully they will offer compensation to everyone if its determined theyre at fault for the incident. Its difficult to map out since theres many theft addresses. Heres my list so far below: EVM 0x3b09A3c9aDD7D0262e6E9724D7e823Cd767a0c74 0x463452C356322D463B84891eBDa33DAED274cB40 0xa42297ff42a3b65091967945131cd1db962afae4 0xe072358070506a4DDA5521B19260011A490a5aaA 0xe072358070506a4DDA5521B19260011A490a5aaA 0xc22b8126ca21616424a22bf012fd1b7cf48f02b1 0x463452c356322d463b84891ebda33daed274cb40"
X Link 2025-12-25T21:10Z 947K followers, 205.1K engagements

"@cozypront That X account is a scammer larping as a girl and lying about being a victim of the hack to bait engagement. [--] username changes countless meme coin scams only [---] posts for a [----] account they preblocked me X User ID: 1725149174780268544"
X Link 2025-12-26T03:53Z 946.9K followers, 184.3K engagements

"Please make the algorithm less sensitive. If I like or scroll replies on a post outside my niche on For You it will flood it with the same type of posts vs posts I missed from accounts I follow or topics I engage with. Seems to happen most with geopolitics sports rage bait. The only workaround is to search / explore on a second account so I do not alter the current recommended posts. https://twitter.com/i/web/status/2010081749360050269 https://twitter.com/i/web/status/2010081749360050269"
X Link 2026-01-10T20:10Z 946.6K followers, 339.8K engagements

"Congrats you accidentally outed yourself as a candidate for the worst onchain analyst of the year. The threat actor bridged from Bitcoin to Ethereum Litecoin & Ripple via Thorchain. The main entity taking the other-side of Thorchain swaps uses Binance for arbitrage. You can also easily tell these are Thorchain txns from the OP_Return memo in your screenshots. While Arkham is good free analytics tool for retail it does not attribute cross chain swaps or UTXO well. bc1qgkjems88jyk8hasj9ncspxz093nepdn00vaq0y = Thorchain user (threat actor) bc1q30drw0j0erj804lyvl8pxrj789kaplpu2dryx9 = Asgard"
X Link 2026-01-18T16:46Z 946.3K followers, 116K engagements

"@crunch1271 will be donating $5K to a Chile Wildfire charity once @CarlotaFang77 is online (40 SOL received from fees) Hola. I don't like making this kind of post because it can sometimes lead to misinterpretations but I feel its my moral duty and responsibility to do so. Most crypto outlets in the region dont seem to give a fuck about tragedies/charity like this on a regular basis. Besides my https://t.co/LHEgiiWMTP Hola. I don't like making this kind of post because it can sometimes lead to misinterpretations but I feel its my moral duty and responsibility to do so. Most crypto outlets in"
X Link 2026-01-20T12:18Z 946.6K followers, 44.6K engagements

"@DCinvestor @Polymarket Clickbait news slop accounts has to be the worst current trend on X. Never cite the source Post the headline hours or days late Turn original headline into clickbait slop"
X Link 2026-01-23T06:12Z 946.8K followers, 38.8K engagements

"@Ledger [----] starter pack"
X Link 2026-01-23T08:52Z 946.7K followers, 168.1K engagements

"@tier1haterr Many such cases"
X Link 2026-01-23T14:15Z 946.7K followers, 21.5K engagements

"because MEXC allowed a threat actor deposit / withdraw $12.4M+ of stolen government funds yesterday to MEXC deposit 0x79648e86b9e58fabb896438e2019905fa363a2ee now today as recent as [--] min ago the same threat actor deposited 240+ ETH total to MEXC deposit 0x068C3773609ec31588425ae90d271e3569B78f40 https://twitter.com/i/web/status/2015073648021840066 https://twitter.com/i/web/status/2015073648021840066"
X Link 2026-01-24T14:46Z 946.9K followers, 199.2K engagements

"@jerallaire Circle co-founder promotes vibe coded microcap with Pump Fun contract address in bio We are not a serious industry"
X Link 2026-02-02T03:34Z 946.9K followers, 84.9K engagements

"@jasonkwon MaKeS yOu WoNdEr WhAt He Is HiDiNg"
X Link 2026-02-04T00:16Z 946.7K followers, 70.1K engagements

"@TGKContent @sama Open AI is the Epstein of AI companies if you think theyll act with integrity and safely handle user personal data vs max extract No Diddy"
X Link 2026-02-04T21:13Z 946.7K followers, [----] engagements

"Teams got by before due to number go up so currently all of the bs projects get rekt deservedly. The real issue is maybe 5-10 accounts max on CT publish quality content and none of them actively solicit marketing deals. Still hitting ATH reach on investigations regardless of current market conditions. https://twitter.com/i/web/status/2019216734473916911 https://twitter.com/i/web/status/2019216734473916911"
X Link 2026-02-05T01:09Z 946.5K followers, 27.4K engagements

"@crunch1271 @jerallaire deploying a honeypot"
X Link 2026-02-05T01:47Z 946.5K followers, 10.3K engagements

"@0xTakeProfits @jerallaire gramps first time using AI"
X Link 2026-02-05T01:47Z 946.6K followers, [----] engagements

"@SommerChase @jerallaire AI vibecoded slop does not equal quality"
X Link 2026-02-05T01:51Z 946.5K followers, 18.8K engagements

"@Surf_Liquid @jerallaire Blocked for AI slop"
X Link 2026-02-05T02:30Z 946.5K followers, [----] engagements

"@ItsEvelynScott @jerallaire Says the man larping as a woman while in India"
X Link 2026-02-05T02:44Z 946.7K followers, [----] engagements

"Wait until a startup makes a small error by sending $500K USDC to the wrong address and Circle refuses to assist them further even after a law enforcement request. This is the harsh reality the crypto ecosystem has faced for years when incidents occur. Circle says they are builder friendly until it actually comes time to ask them to protect the interests of its users (Tether/Paxos are generally better in that regard) https://twitter.com/i/web/status/2019380705277391003 https://twitter.com/i/web/status/2019380705277391003"
X Link 2026-02-05T12:00Z 946.8K followers, 24.5K engagements

"@yieldhunter95 They first targeted him from the Ledger data breach"
X Link 2026-02-05T19:50Z 946.7K followers, 17.9K engagements

"@beausecurity Both perpetrators deserve the electric chair as punishment"
X Link 2026-02-06T17:24Z 946.6K followers, 32.3K engagements

"@0xRacist Up only"
X Link 2026-02-06T17:37Z 947K followers, 56.5K engagements

"@ParochuteCrypto @wyckoffweb I do not take on XRP cases and never asked to be contacted"
X Link 2026-02-06T21:11Z 946.6K followers, [----] engagements

"@mymoneytrades @wyckoffweb $250K - $500K for a single victim for a recent theft means Ill usually reply if basic details were provided in the initial message (theft address date location suspected root cause etc) and its not a bad jurisdiction"
X Link 2026-02-07T14:16Z 946.8K followers, [----] engagements

"@cryptofundix @Polymarket Blocked for AI slop"
X Link 2026-02-09T12:47Z 946.7K followers, [----] engagements

"@sirshibaninja @phantom Blocked for AI slop"
X Link 2026-02-10T01:24Z 947K followers, 10.8K engagements

"@artstu @phantom Convenience (thefts happen way more frequently than youd expect)"
X Link 2026-02-10T02:48Z 947K followers, [----] engagements

"@Damos20820110 @TedPillows Web [--] prostitute"
X Link 2026-02-12T14:22Z 946.7K followers, [----] engagements

"1/ Lets breakdown the $6.3m NFT rug Animoon a project that has constantly screwed over its holders since day 1"
X Link 2022-06-02T15:56Z 947.1K followers, [----] engagements

"1/2 North Koreas Lazarus Group had a very busy weekend moving $63.5m (41000 ETH) from the Harmony bridge hack through Railgun before consolidating funds and depositing on three different exchanges"
X Link 2023-01-15T23:49Z 947.1K followers, 2.1M engagements

"BALD deployer is potentially revealed here. Two days ago I noticed they had sent Mike $50K back in [----] and reached out to him to ask who it might be. 0x0b6e7d5668c4a0a8e13d618b1ffc4406d079141e022381aad379040518dec285 Glad to see he shared this info. Funds came from an address that seems linked to the $bald deployer The bet I placed was with @milkyway16eth Funds came from an address that seems linked to the $bald deployer The bet I placed was with @milkyway16eth"
X Link 2023-08-03T15:46Z 947K followers, 6.2M engagements

"The same scammer profited $385K (234 ETH) in the past [--] hours off SIM swapping four different FriendTech users"
X Link 2023-10-04T22:29Z 947.1K followers, 125.6M engagements

"Hello @MarioNawfal why is my name appearing in a deck to shill your marketing services when I have never done paid promotions or spoken with your IBC team Unless you count my services as the times I called you out for spreading misinformation during the FTX incident"
X Link 2023-12-15T13:20Z 947K followers, 993.2K engagements

"@Safety @SECGov Hi @GaryGensler this is a reminder to secure your financial accounts as well as protect against identity theft and fraud. Remember to: 🔒Use strong passphrases or passwords 🔒Set up multifactor authentication 🔒Keep account alerts turned on #CybersecurityAwarenessMonth"
X Link 2024-01-10T03:40Z 947K followers, 868.5K engagements

"Remember when influencers with a lot of followers start shilling a project launch at the same time it is likely bc they have allocation and will dump their cheap tokens on you"
X Link 2024-01-19T14:40Z 947K followers, 2M engagements

"Remember when KSI posted All of a sudden my $XCAD bag is looking juicy again. #HodlGang Then proceeded to dump $850000 worth of XCAD over the following days from his wallet address. Does this still work Does this still work"
X Link 2024-02-13T23:57Z 947K followers, 2.5M engagements

"Thanks for playing"
X Link 2024-02-14T09:55Z 947K followers, 669.6K engagements

"1/ An investigation into how the influencer Crypto Rover ghosted a project he was paid to promote mislead followers about his trading positions and also his shills for pump and dump meme coins"
X Link 2024-02-20T13:12Z 947.1K followers, 2.4M engagements

"I am pleased to share @pokerbrat2019 aka Robert Robb was arrested earlier today in Las Vegas according to Henderson Police records. In December [----] I made a post detailing how he stole $1.2M+ from [--] individuals and exposed his prior criminal history of fraud. Since then I have been working with victims to get them justice. While we cannot know for sure until court documents are released I doubt there would be any other reason for the arrest"
X Link 2024-03-21T05:19Z 947.1K followers, 873.7K engagements

"1/ An investigation into the French dev Jolan Lacroix who recently stole $900K from the TICKER presale on Base before spending the funds on meme coins and Milady NFTs"
X Link 2024-03-21T14:34Z 947K followers, 1.4M engagements

"Wtf two of my posts were cited in a recent United Nations report"
X Link 2024-04-08T13:19Z 947.1K followers, 568K engagements

"Community Alert: The group of scammers who stole [--] figs with Magnate Kokomo Lendora Solfire etc is back with a new project on Blast @Leaperfinance Last week they funded an address on Blast with $1M of laundered funds from the previous rugs and have begun adding liquidity to bait people in. Tracing: 1). [--] week ago 0x46a moves ETH a few hops from Magnate scam to 0x10e 0x46a10e7444bf78736E6a24b1De8dc8A20E4B3ED7 0x10ef5bb874b226bdd6860f00d5e5a2aa3e955b9a 2). Bridges to 0xAc9 on Polygon 0xAc973E1Be91fe8674dff2E0de4A9375803Ae4435 3). 0xAc9 transfers wETH to 0x08"
X Link 2024-04-14T02:17Z 947.1K followers, 966K engagements

"Putting final touches this week on an investigation I have been working on for 15+ months. By far my biggest project to date and I look forward to sharing it soon. Expect no other new posts in the meantime"
X Link 2024-04-22T13:59Z 947K followers, 1.3M engagements

"Proud to share that earlier this year I helped lead an initiative which resulted in the successful seizure of $12M connected to the Caesars ransomware incident from September [----]. This was done in collaboration with @cryptoesq and law enforcement"
X Link 2024-05-02T17:38Z 947.1K followers, 531.5K engagements

"For those who are confused and need additional context. Earlier today Arkham announced a $150K bounty for the identity of the DJT creator 11:49 pm UTC I reply to Arkham saying I submitted for the bounty 11:57 pm UTC Martin Shkreli panic DMs me 12:27 am UTC Martin Shkreli creates a spaces and announces he is the creator of DJT"
X Link 2024-06-19T01:38Z 947K followers, 2.4M engagements

"@10Ronaldinho Is this a translation for you are bankrupt again In case you forgot here are all of the crypto projects you pump and dumped over the years"
X Link 2024-06-24T03:14Z 947.1K followers, 192.4K engagements

"1/ Recently a team reached out to me for assistance after $1.3M was stolen from the treasury after malicious code had been pushed. Unbeknownst to the team they had hired multiple DPRK IT workers as devs who were using fake identities. I then uncovered 25+ crypto projects with related devs that have been active since June 2024"
X Link 2024-08-15T11:36Z 947.1K followers, 2.7M engagements

"Jason Derulo has not posted about his JASON token on X/Twitter since July. Wonder what happened to: I am committed to this space long term. I want to see everyone win in our community and I want to grow not just our family but all of crypto Yesterday Jason promoted another Tron meme coin and deleted shortly after. Shame on all of the influencers who promoted him and thought this time would be different from the 15+ scams he has promoted in the past"
X Link 2024-09-04T17:05Z 947.1K followers, 933.7K engagements

"11/ While most of the funds were converted to XMR both Box and Wiz accidentally linked the laundered funds with the dirty funds on multiple instances. a) Wiz during screenshare showed an address he sent funds to for designer clothes which had millions in exposure to the cluster above. 0xb98b8ac004cea6617adcf3e94106d0eec1792bd9 b) Box linked the dirty funds with the cleans funds by accidentally reusing a deposit address. 0x6d865235ebb2504d3478fc1dd839100d210144df"
X Link 2024-09-19T13:05Z 947.1K followers, 640.6K engagements

"13/ As a result of the investigation Box and Greavys were arrested yesterday evening in Miami and LA. I would expect law enforcement seized additional funds during the arrests due to large transfers around that period of time"
X Link 2024-09-19T13:05Z 947.1K followers, 617K engagements

"Update: Box (Jeandiel) and Greavys (Malone) just had the indictment for the case unsealed https://www.justice.gov/usao-dc/pr/indictment-charges-two-230-million-cryptocurrency-scam https://www.justice.gov/usao-dc/pr/indictment-charges-two-230-million-cryptocurrency-scam"
X Link 2024-09-19T19:19Z 947.1K followers, 847.2K engagements

"@OpSecCloud From early on there were many red flags if you did basic due diligence so its clear all of the influencers who promoted OPSEC looked past this. Keep the names of influencers from these screenshots in mind and avoid them for the rest of this bull run"
X Link 2024-11-14T10:56Z 947K followers, 123.2K engagements

"@EdgeWallet Thanks for not crediting the original source. 1/ An investigation into how Greavys (Malone Iam) Wiz (Veer Chetal) and Box (Jeandiel Serrano) stole $243M from a single person last month in a highly sophisticated social engineering attack and my efforts which have helped lead to multiple arrests and millions frozen. https://t.co/dcY1e9xsPd 1/ An investigation into how Greavys (Malone Iam) Wiz (Veer Chetal) and Box (Jeandiel Serrano) stole $243M from a single person last month in a highly sophisticated social engineering attack and my efforts which have helped lead to multiple"
X Link 2024-12-24T04:32Z 947.1K followers, 283.2K engagements

"@realDonaldTrump"
X Link 2025-01-18T03:36Z 947.1K followers, 1.5M engagements

"@BarryBaumer @exit_liquid @thomahov Interesting"
X Link 2025-01-27T15:37Z 947.1K followers, 92.2K engagements

"1/ Over the past few months I imagine you have seen many Coinbase users complain on X about their accounts suddenly being restricted. This is the result of aggressive risk models and Coinbases failure to stop its users losing $300M+ per year to social engineering scams"
X Link 2025-02-03T13:50Z 947.1K followers, 2.4M engagements

"11/ I do not blame all Coinbase employees as most of the fault lies on leadership for these decisions. While this post is critical of Coinbase what have they done well providing good stablecoin on-ramp / off-ramp for retail attracting talent to build on Base recovery tool for users who deposit unsupported assets fighting the SEC Coinbase custody product allowing users to passively earn yield on stables easily (Also theres only so much you can do to educate people about threats such as email/call spoofing)"
X Link 2025-02-03T13:50Z 947K followers, 101.9K engagements

"@arkham TLDR myself and Josh from CF connected the Bybit hack on-chain to the Phemex hack"
X Link 2025-02-21T20:27Z 947.1K followers, 540.3K engagements

"Lazarus Group just connected the Bybit hack to the Phemex hack directly on-chain commingling funds from the intial theft address for both incidents. Overlap address: 0x33d057af74779925c4b2e720a820387cb89f8f65 Bybit hack txns on Feb [--] 2025: 0xc963e65b9ec39b11076f78990c31f29aaa80705c75312dafd1748479e3e94ed0 0x411374feedcfa560335f00c0fcfa0a3906fdcc33687e6f924dd78ebecc45cd00 Phemex hack txns on Feb [--] 2025: 0x6262a3339842240aeebae4ebfe338dbc771aa0e2df8f5a1ebcd7f9b090bedfe3"
X Link 2025-02-22T08:09Z 947.1K followers, 1.6M engagements

"CRO is no different from a scam Your team just reissued 70B CRO a week ago that was previously burned forever in [----] (70% total supply) and went against the community wishes as you control majority of the supply. Unsure why Truth would chose a partnership with your exchange over Coinbase Kraken Gemini etc after this move by your team. h/t Unchained Crypto for the data"
X Link 2025-03-25T05:07Z 947.1K followers, 527.7K engagements

"@BitoEx_Official Do you want to explain to the community why multiple of your hot wallets saw suspicious outflows of $11.5M on May [--] [----] where you still have not disclosed the security incident on X or Telegram several weeks later"
X Link 2025-06-02T05:57Z 947.1K followers, 76.7K engagements

"The crime supercycle is indeed very real. While its true the industry has historically been ripe for abuse it has noticeably increased since politicians launched meme coins and numerous court cases were dropped further enabling the behavior. Laundering groups and small OTC brokers have seemingly won the battle for Lazarus Group after successfully laundering recent hacks (Bybit DMM Bitcoin WazirX etc) with ease. I estimate the Black U market on Tron is no less than $5-10B and largely unattributed. A number of teams sit and watch collecting fees doing nothing when 50% of the activity for their"
X Link 2025-06-18T03:31Z 947.1K followers, 683.1K engagements

"1/ An investigation into how the New York based social engineering scammer Daytwo/PawsOnHips (Christian Nieves) stole $4M+ from Coinbase users by impersonating customer support bought luxury goods and lost most of the funds gambling at casinos"
X Link 2025-06-23T12:12Z 947.1K followers, 1.3M engagements

"So Crypto Rover tagged Grok to select a winner for a giveaway and it began replying about his involvement in pump and dump schemes and sketchy promotions and is refusing to select a winner"
X Link 2025-07-21T03:37Z 947.1K followers, 1.4M engagements

"Since July [--] [----] an address linked to Ripple co-founder Chris Larsen transferred out 50M XRP ($175M) to four addresses. $140M ended up at exchanges/services 30M XRP recipient rPS9kVPbgZF4vXq2hs6s9Xv2754qdRau98 rnQXgGAjqbF4KoBpcBK5YBHyZEL7nGWWoi 10M XRP recipient rHtLaipqqfbhgMSHkF1YcuWaivvgRH851o $35M received to two new addresses 5M XRP recipient rNLrQvgfLZNLqcqjAAQYBUNBSC5dVkiDXw 5M XRP recipient rhmkfhYZY3XJgGTcGxLAKuEoph49bmMqbb"
X Link 2025-07-24T07:01Z 947.1K followers, 464.1K engagements

"Update: Crypto Beast just reactivated his account and changed his username to @realcryptoelio a few minutes ago"
X Link 2025-08-06T08:26Z 947.1K followers, 183.6K engagements

"10/ Still one of the more common questions is how do you know they are North Korean Well besides all of the fraudulent documents detailed above their search history showed frequent Google Translate usage with translations to Korean with a Russian IP"
X Link 2025-08-13T12:55Z 947.1K followers, 217.4K engagements

"12/ It's extremely rare to see exploits/hacks involve NFT wash trading and I think the relationship between each address is just too coincidental given how they were funded prior to NFT purchases and traded multiple above the floor price for the collection. Hopefully law enforcement eventually moves forward with a criminal case in the future. Another piece of evidence is the overlap in instant exchanges used by the attacker and also tied to the suspects which I did not dive into as much since this post was getting quite long"
X Link 2025-10-15T14:19Z 947.1K followers, 107.6K engagements

"@cecilia_hsueh Meanwhile MEXC listings:"
X Link 2025-10-15T19:28Z 947.1K followers, 98.4K engagements

"@brandank_cr Why do so many accounts believe this larp with a paid group when he got caught faking PNL screenshots before last year Says publicly turned $700K - $20M Zero actual proof of multiple [--] fig positions Instead just charts many tickers and comes back to reference winners"
X Link 2025-11-08T06:29Z 947.1K followers, 640.3K engagements

"@ceterispar1bus @mert post about top [---] token = paid shill Mert Cobie etc 51% bundled ZEC for supply control MRP coded CA"
X Link 2025-11-16T12:13Z 947K followers, 73.1K engagements

"Update: A superseding indictment from a few hours ago confirmed my analysis that Danny / Danish Zulfiqar (Khan) was arrested in Dubai. Seizure address 0xb37d617716e46511E56FE07b885fBdD70119f768"
X Link 2025-12-09T05:44Z 947.1K followers, 179.4K engagements

"4/ Haby swapped his cut from the thefts from XRP to BTC via instant exchanges. By performing a timing analysis i was able to locate his BTC address. bc1qn3k5cz3905p6k50r44pjlj2rl9qcy72flsq3zh"
X Link 2025-12-29T14:36Z 947.1K followers, 96.2K engagements

"12/ Canadian law enforcement may already be familiar with Haby since theres been several swatting attempts involving his personal details locally. Unfortunately Canada is a jurisdiction that rarely ever prosecutes threat actors from The Com. I hope Canadian LE makes an exception as Haby shows zero remorse for victims and it is a rather easy case due to the large quantity of evidence available. https://twitter.com/i/web/status/2005649228408725593 https://twitter.com/i/web/status/2005649228408725593"
X Link 2025-12-29T14:36Z 947.1K followers, 173.8K engagements

"6/ 0xd8bc receives from 0x8924 which in the recording John confirms owning. 0x8924 received [----] WETH from 0xc7a2 on Nov [--] [----] in the following txn. 0x76c6e92c4cefda209263a214241f1b47b9cff0123e9d292d613aea3447466dd0"
X Link 2026-01-23T13:02Z 947.1K followers, 102.8K engagements

"History has shown that Circle is a bad actor. SwapNet contracts were exploited for $13M USDC on Base [--] hours ago. 3M USDC is still sitting freezable at 0x6cAad74121bF602e71386505A4687f310e0D833e Why should anyone continue building on $USDC when you never take care of your users as a centralized stablecoin issuer https://twitter.com/i/web/status/2015659175892885541 https://twitter.com/i/web/status/2015659175892885541"
X Link 2026-01-26T05:32Z 947.1K followers, 22.3K engagements

"@follis_ Just another day in crypto"
X Link 2026-01-26T06:36Z 947.1K followers, 55.8K engagements

"@IntCyberDigest The video relates to this investigation of mine. 1/2 In June [----] a victim was brutally robbed for $4.3M+ of crypto assets at gunpoint via home invasion in the UK after the attackers posed as delivery drivers. I am proud to share that Faris & his two other accomplices were just sentenced and nearly the full amount of stolen https://t.co/raTUVdog4y 1/2 In June [----] a victim was brutally robbed for $4.3M+ of crypto assets at gunpoint via home invasion in the UK after the attackers posed as delivery drivers. I am proud to share that Faris & his two other accomplices were just"
X Link 2026-02-05T19:45Z 947.1K followers, 49.6K engagements

"@AOWISEONE @wyckoffweb I receive 30+ requests per day for help If I spent [--] minutes replying / reviewing to all cases thats nearly [--] hours A single case easily can surpass 25+ hrs"
X Link 2026-02-06T19:52Z 947.1K followers, [----] engagements

"@sethsetse until you have the realization that real humans from third world countries flood social media with the same AI slop as bots due to engagement groups ad revenue or other incentives"
X Link 2026-02-13T08:44Z 947.1K followers, 52.7K engagements

"1/ I am very happy to share the FBI seized crypto BAYC [----] AP watch and Doodle [----] from the phishing scammer known as Horror (HZ) aka Chase Senecal as a result of my thread"
X Link 2023-02-03T18:27Z 947.1K followers, 1.2M engagements

"Not that people in this space will care but @GROKERC20 $GROK was created by a scammer. Same exact X/Twitter account has been reused for at least one other scam. X/Twitter ID: 1690060301465714692"
X Link 2023-11-13T15:59Z 947.1K followers, 2.1M engagements

"2/ Incident Summary: On August [--] [----] the threat actors targeted a single Genesis creditor by: 1) Calling as Google Support via spoofed number to compromise personal accounts 2) Calling after as Gemini support claiming account is hacked 3) Social engineered victim into resetting 2FA and sending Gemini funds to compromised wallet 4) Got victim to use AnyDesk to share screen and leaked private keys from Bitcoin core. Gemini txn hash [-----] BTC - Aug [--] at 1:48 am UTC e747b963a463334c164b0a8fff844f73693272bb2b331adbe2147d70ec196360 [-----] BTC - Aug [--] at 2:30 am UTC"
X Link 2024-09-19T13:03Z 947.1K followers, 1.2M engagements

"12/ With the assistance of @CFInvestigators @zeroshadow_io and the Binance Security Team more than $9M+ has been frozen and $500K+ has already been returned back after working closely with the victim to investigate the incident"
X Link 2024-09-19T13:05Z 947.1K followers, 536.4K engagements

"Pleased to share I'll be working with @MattHuang @Paradigm as an incident response advisor to assist their portfolio companies. It was an easy decision as this gives me the freedom to continue helping the community and publishing investigations like. Ive always respected how Paradigm has given back to the space by funding intiatives such as Security Alliance publishing open source research and helping defend the right to privacy. .@zachxbt is a legend using onchain forensics to keep bad actors accountable. He has returned over $350M to victims of hacks and scams. This is increasingly"
X Link 2025-02-26T15:33Z 947.1K followers, 772.6K engagements

"Update: Today twelve people were charged for the $243M Genesis creditor theft. Aakaash Anand was featured in the clip on 6/ laundering funds for Veer/Wiz"
X Link 2025-05-15T21:09Z 947.1K followers, 406.5K engagements

"@NewsyJohnson pov"
X Link 2025-06-07T05:06Z 947.1K followers, 80.3K engagements

"Whats most interesting is wallet addresses listed in the US government $14B (127K BTC) seizure previously were named in a Milky Sad report [--] years ago for having vulnerable private keys and now the USG says they have custody of them. ZOOMER U.S. SEEKS FORFEITURE OF [------] BTC ($12B) TIED TO TRANSNATIONAL PIG BUTCHERING SCAM RUN BY CHINESE NATIONAL CHEN ZHI ZOOMER U.S. SEEKS FORFEITURE OF [------] BTC ($12B) TIED TO TRANSNATIONAL PIG BUTCHERING SCAM RUN BY CHINESE NATIONAL CHEN ZHI"
X Link 2025-10-14T15:45Z 947.1K followers, 653.3K engagements

"6/ The stolen funds flowed to more instant exchanges from 0x87d8 on June [--] and the rest was consolidated to 0x1d7 on June [--]. 0x1d7 bridged [----] ETH to Avalanche and back again to Ethereum via Synapse on June [--]. 0x4fbc6c00fa1ef99561e1d977ee6c678a54cfb06f"
X Link 2025-10-15T14:19Z 947.1K followers, 41.6K engagements

Limited data mode. Full metrics available with subscription: lunarcrush.com/pricing