[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

# ![@zachxbt Avatar](https://lunarcrush.com/gi/w:26/cr:twitter::3012852462.png) @zachxbt ZachXBT

ZachXBT, a prominent investigator, has been tracking and exposing various cryptocurrency scams and exploits, including those linked to North Korean IT workers (DPRK ITWs). The investigations have led to multiple arrests, millions of dollars frozen, and the exposure of several scammers, including Crypto Beast, who rebranded as RealCryptoElio. Additionally, ZachXBT's work has highlighted the ongoing issue of DPRK ITWs being hired by companies, often due to a lack of proper due diligence, leading to significant financial losses.

### Engagements: XXXXXXX [#](/creator/twitter::3012852462/interactions)
![Engagements Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::3012852462/c:line/m:interactions.svg)

- X Week XXXXXXXXX +207%
- X Month XXXXXXXXX -XX%
- X Months XXXXXXXXXX -X%
- X Year XXXXXXXXXXX -XX%

### Mentions: XXX [#](/creator/twitter::3012852462/posts_active)
![Mentions Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::3012852462/c:line/m:posts_active.svg)

- X Week XXX -XX%
- X Month XXX -XX%
- X Months XXX +0.78%
- X Year XXXXX -XX%

### Followers: XXXXXXX [#](/creator/twitter::3012852462/followers)
![Followers Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::3012852462/c:line/m:followers.svg)

- X Week XXXXXXX +0.06%
- X Month XXXXXXX +0.23%
- X Months XXXXXXX +7.40%
- X Year XXXXXXX +32%

### CreatorRank: XXXXXXX [#](/creator/twitter::3012852462/influencer_rank)
![CreatorRank Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::3012852462/c:line/m:influencer_rank.svg)

### Social Influence

**Social category influence**
[cryptocurrencies](/list/cryptocurrencies)  #1793 [finance](/list/finance)  XXXXX% [exchanges](/list/exchanges)  #1181 [technology brands](/list/technology-brands)  XXXX% [stocks](/list/stocks)  XXXX% [countries](/list/countries)  XXXX% [automotive brands](/list/automotive-brands)  XXXX% [social networks](/list/social-networks)  XXXX% [currencies](/list/currencies)  XXXX% [luxury brands](/list/luxury-brands)  XXXX%

**Social topic influence**
[crypto](/topic/crypto) #1779, [token](/topic/token) #1253, [future](/topic/future) 3.47%, [solana](/topic/solana) #1369, [ai](/topic/ai) #6036, [$243m](/topic/$243m) #1, [coinbase](/topic/coinbase) #234, [ledger](/topic/ledger) #187, [money](/topic/money) 2.78%, [mexc](/topic/mexc) #169

**Top accounts mentioned or mentioned by**
[@cjay_btc](/creator/undefined) [@fly2fiji](/creator/undefined) [@kryptonomanos](/creator/undefined) [@mexcofficial](/creator/undefined) [@toplonging](/creator/undefined) [@cryptoblckparty](/creator/undefined) [@good69_420](/creator/undefined) [@karbonbased](/creator/undefined) [@bnbchain](/creator/undefined) [@astr0xgen](/creator/undefined) [@grokseus5](/creator/undefined) [@zolandinho](/creator/undefined) [@bigray0x](/creator/undefined) [@damian__web](/creator/undefined) [@wyge_1](/creator/undefined) [@marc_darious](/creator/undefined) [@cr1337](/creator/undefined) [@0boundary](/creator/undefined) [@alleybo55](/creator/undefined) [@degeneratenews](/creator/undefined)

**Top assets mentioned**
[Solana (SOL)](/topic/solana) [Coinbase Global, Inc. (COIN)](/topic/coinbase) [Celestia (TIA)](/topic/celestia) [Ethereum (ETH)](/topic/ethereum) [Alphabet Inc Class A (GOOGL)](/topic/$googl) [Zcash (ZEC)](/topic/zcash) [AltLayer (ALT)](/topic/$alt) [SatoshiVM (SAVM)](/topic/satoshivm) [Payoneer Global Inc. Common Stock (PAYO)](/topic/$payo) [Bittensor (TAO)](/topic/bittensor) [XRP (XRP)](/topic/xrp) [Whiteheart (WHITE)](/topic/$white) [Stella (ALPHA)](/topic/$alpha) [GPU ai Rich (RICH)](/topic/$rich) [John Tsubasa Rivals (JOHN)](/topic/$john) [Fusionist (ACE)](/topic/$ace) [ThorFi (THOR)](/topic/thorfi) [Dinger (DINGER)](/topic/dinger-token)
### Top Social Posts
Top posts by engagements in the last XX hours

"@satoshivm From SAVM shilled by many influencers last year at TGE to one year later no social media activity on X/TG no Github activity in months and token down 99%. Who could have possibly seen this coming"  
[X Link](https://x.com/zachxbt/status/1913534556260425737)  2025-04-19T10:06Z 931.7K followers, 63.2K engagements


"10/ Still one of the more common questions is how do you know they are North Korean Well besides all of the fraudulent documents detailed above their search history showed frequent Google Translate usage with translations to Korean with a Russian IP"  
[X Link](https://x.com/zachxbt/status/1955614268327444658)  2025-08-13T12:55Z 931.7K followers, 209.6K engagements


"1/ An investigation into how Greavys (Malone Iam) Wiz (Veer Chetal) and Box (Jeandiel Serrano) stole $243M from a single person last month in a highly sophisticated social engineering attack and my efforts which have helped lead to multiple arrests and millions frozen"  
[X Link](https://x.com/zachxbt/status/1836752923830702392)  2024-09-19T13:03Z 931.7K followers, 12.6M engagements


"11/ While most of the funds were converted to XMR both Box and Wiz accidentally linked the laundered funds with the dirty funds on multiple instances. a) Wiz during screenshare showed an address he sent funds to for designer clothes which had millions in exposure to the cluster above. 0xb98b8ac004cea6617adcf3e94106d0eec1792bd9 b) Box linked the dirty funds with the cleans funds by accidentally reusing a deposit address. 0x6d865235ebb2504d3478fc1dd839100d210144df"  
[X Link](https://x.com/zachxbt/status/1836753450672988649)  2024-09-19T13:05Z 931.7K followers, 622.8K engagements


"Update: Box (Jeandiel) and Greavys (Malone) just had the indictment for the case unsealed"  
[X Link](https://x.com/zachxbt/status/1836847633018626466)  2024-09-19T19:19Z 931.7K followers, 831.7K engagements


"Update: Today twelve people were charged for the $243M Genesis creditor theft. Aakaash Anand was featured in the clip on 6/ laundering funds for Veer/Wiz"  
[X Link](https://x.com/zachxbt/status/1923123503823192157)  2025-05-15T21:09Z 931.7K followers, 335.7K engagements


"when the biggest shills for a project come from sketchy KOLs (Nekoz etc) vs actual builders for a project it typically means the tech is underwhelming. nonetheless the supply control by them has so far been impressive L1s w/ token preproduct + large tax at launch for a serious project = pumping to insane valuation will always be funny *mutes before angry holders appear*"  
[X Link](https://x.com/zachxbt/status/1932082261303902604)  2025-06-09T14:28Z 931.7K followers, 237.7K engagements


"1/ An investigation into how the New York based social engineering scammer Daytwo/PawsOnHips (Christian Nieves) stole $4M+ from Coinbase users by impersonating customer support bought luxury goods and lost most of the funds gambling at casinos"  
[X Link](https://x.com/zachxbt/status/1937121554124754960)  2025-06-23T12:12Z 931.7K followers, 1.3M engagements


"12/ Soon I plan to publish my stats on total payments being sent out to DPRK ITWs at companies/projects to provide insight into how bad it is. Its depressing how many teams hire DPRK IT workers when basic due diligence would likely have prevented it. The lack of communication from Matt Furie & ChainSaw since the incident occurred has been disappointing with their only warning to the community deleted without explanation. The stolen funds from the ChainSaw incident mostly remain dormant. The stolen funds for Favrr were transferred to Gate and a few nested services. I have been unable to get in"  
[X Link](https://x.com/zachxbt/status/1938599039668474306)  2025-06-27T14:03Z 931.6K followers, 161K engagements


"11/ The main challenge faced in fighting DPRK ITWs at companies include the lack of collaboration between services and the private sector. Theres also the negligence by the teams hiring them who become combative when alerted. ITWs are in no way sophisticated but are persistent since theres so many flooding the job market globally for roles. Payoneer is commonly being used to convert fiat into crypto from dev work. I have already covered multiple times on indicators of what to look out for so I will not repeat those again"  
[X Link](https://x.com/zachxbt/status/1955614285343699128)  2025-08-13T12:55Z 931.7K followers, 178.7K engagements


"On Aug XX 2025 a victim fell for a social engineering scam and lost XXX BTC ($91M) after exchange and hardware wallet customer support were impersonated. The stolen funds began to peel off and deposits to Wasabi were made by the threat actor. Coincidentally this theft happened on the one year anniversary of the $243M Genesis Creditor theft. Theft txn hash da598f2a941ee3c249a3c11e5e171e186a08900012f6aad26e6d11b8e8816457 Theft address bc1qyxyk4qgyrkx4rjwsuevug04wahdk6uf95mqlej"  
[X Link](https://x.com/zachxbt/status/1958583129356345414)  2025-08-21T17:33Z 931.7K followers, 709.3K engagements


"Update: OpenVPP appears to be potentially misrepresenting a third partnership with Smartcar When contacted the founder stated: His company is using Smartcar's self-service API offering. (It's something that anyone can access and use on our website.) My company Smartcar and have no further connection or involvement with their cryptocurrency token or related activities"  
[X Link](https://x.com/zachxbt/status/1969138235139113206)  2025-09-19T20:35Z 931.7K followers, 157.9K engagements


"1/ An investigation into how I identified one of suspects tied to the $28M Bittensor hack from 2024 by identifying anime NFT wash trades linked to a former employee and earned a whitehat bounty for my efforts"  
[X Link](https://x.com/zachxbt/status/1978465677578301723)  2025-10-15T14:19Z 931.7K followers, 451.8K engagements


"12/ It's extremely rare to see exploits/hacks involve NFT wash trading and I think the relationship between each address is just too coincidental given how they were funded prior to NFT purchases and traded multiple above the floor price for the collection. Hopefully law enforcement eventually moves forward with a criminal case in the future. Another piece of evidence is the overlap in instant exchanges used by the attacker and also tied to the suspects which I did not dive into as much since this post was getting quite long"  
[X Link](https://x.com/zachxbt/status/1978465874572128486)  2025-10-15T14:19Z 931.7K followers, 94.8K engagements


"@P3b7_ Kind of a bit excessive to charge users all of these fees on top of the Ledger device they originally purchase"  
[X Link](https://x.com/zachxbt/status/1981568238279708812)  2025-10-24T03:47Z 931.7K followers, 366.8K engagements


"1/2 In June 2024 a victim was brutally robbed for $4.3M+ of crypto assets at gunpoint via home invasion in the UK after the attackers posed as delivery drivers. I am proud to share that Faris & his two other accomplices were just sentenced and nearly the full amount of stolen funds was seized by MET Police. I previously published my investigation identifying Faris and worked closely with the victim to communicate all findings to law enforcement. Due to minor protection laws certain details about the case remain sealed. Court: Sheffield Crown Court Case reference number: 01GD1223024"  
[X Link](https://x.com/zachxbt/status/1990809384738230584)  2025-11-18T15:48Z 931.7K followers, 637.6K engagements


"There is just no way good guy McGregor used his reputation as well as Irish culture to scam his fans and fire sell a bunch of digital tokenss online and then delete all of the posts after they were sold leaving his fans robbed of their money There is just no way good guy do this"  
[X Link](https://x.com/zachxbt/status/1993736096019279933)  2025-11-26T17:38Z 931.7K followers, 333.8K engagements


"It appears @Ripple was hacked for 213M XRP ($112.5M) Source address rJNLz3A1qPKfWCtJLPhmMZAfBkutC2Qojm So far the stolen funds have been laundered through MEXC Gate Binance Kraken OKX HTX HitBTC etc"  
[X Link](https://x.com/zachxbt/status/1752694489905528943)  2024-01-31T14:05Z 931.7K followers, 2.7M engagements


"@10Ronaldinho Is this a translation for you are bankrupt again In case you forgot here are all of the crypto projects you pump and dumped over the years"  
[X Link](https://x.com/zachxbt/status/1805076904682434863)  2024-06-24T03:14Z 931.7K followers, 192.3K engagements


"NEW LEAK: Price sheet of 200+ crypto influencers and their wallet addresses from a project they were recently contacted by to promote. From 160+ accounts who accepted the deal I only saw X accounts actually disclose the promotional posts as an advertisement"  
[X Link](https://x.com/zachxbt/status/1962485396597776468)  2025-09-01T11:59Z 931.7K followers, 7.5M engagements


"6/ One lesson our industry needs to do better with is not causing confusion with products when you offer both custodial and non-custodial products. The XRP victim thought they were using the Ellipal cold wallet product when it was a hot wallet. Frequently I see large Coinbase support impersonation thefts where victims transfer funds from their CB exchange account to a compromised CB wallet after being social engineered. After hose victims sometimes state they did not know the difference between products"  
[X Link](https://x.com/zachxbt/status/1979899782023053559)  2025-10-19T13:17Z 931.7K followers, 110.8K engagements


"Who signed off on a flashy limited edition hardware wallet as a good idea after the number of targeted home invasion / robbery cases continues to become more frequent Just give the community Ledger black out edition thats discreet with zero logo so it blends in with other items you own"  
[X Link](https://x.com/zachxbt/status/1996557542517002414)  2025-12-04T12:29Z 931.7K followers, 124.9K engagements


"@patriotsounds @TegiXBT The victims were not provided full compensation by TCY and admin mimir was done unilaterally. A class action lawsuit was even organized by multiple victims as a result of the negligence"  
[X Link](https://x.com/zachxbt/status/1982079426537140714)  2025-10-25T13:38Z 931.7K followers, 3389 engagements


"@L0laL33tz Cryptomixer was a centralized custodial mixer that was in no way decentralized (no CoinJoin). Decentralized noncustodial mixers like Tornado Railgun Wasabi etc start to lose their meaning when privacy advocates defend the bad types"  
[X Link](https://x.com/zachxbt/status/1995741702162948361)  2025-12-02T06:27Z 931.7K followers, 35.9K engagements


"@WYGE_1 @Kryptonomanos @karbonbased Blocked"  
[X Link](https://x.com/zachxbt/status/1997955527327060466)  2025-12-08T09:04Z 931.7K followers, 14.9K engagements


"1/ An investigation into the YouTuber turned phishing scammer Blue (Jack) who has worked with Monkey Drainer and other drainer services to steal more than $1.5m"  
[X Link](https://x.com/zachxbt/status/1678384917657296898)  2023-07-10T12:45Z 931.6K followers, 759.3K engagements


"13/ As a result of the investigation Box and Greavys were arrested yesterday evening in Miami and LA. I would expect law enforcement seized additional funds during the arrests due to large transfers around that period of time"  
[X Link](https://x.com/zachxbt/status/1836753468725338346)  2024-09-19T13:05Z 931.7K followers, 601.3K engagements


"1/ Over the past few months I have been tracking a series of related compromises for McDonalds Usher Kabosu Owner Andy Ayrey Wiz Khalifa SPX 6900 etc on X & IG which has resulted in an estimated $3.5M+ stolen via launching Pump Fun meme coins"  
[X Link](https://x.com/zachxbt/status/1861450263925559399)  2024-11-26T16:41Z 931.7K followers, 2.2M engagements


"1/ Community Alert: At least one team member from the $30M Zkasino exit scam appears to be involved with the project @WhiteRock_Fi $WHITE due to onchain transactions linking both projects and a personal email address"  
[X Link](https://x.com/zachxbt/status/1934616622846931249)  2025-06-16T14:18Z 931.7K followers, 835K engagements


"7/ I think the risk of a rug with WhiteRock remains high due to their history with other projects (Zkasino Syncus Zigzag). I hope @MEXC_Official @Gate_io considers delisting WHITE and also conduct enhanced due diligence on the team. As the Zkasino team awaits trial hopefully soon Ildar Ilham Elham Nourzai & Lior Ben Zakan face serious legal repercussions for all of the harm they have caused to investors"  
[X Link](https://x.com/zachxbt/status/1934616688928113045)  2025-06-16T14:18Z 931.6K followers, 166.3K engagements


"4/ I went and traced out the theft and noticed the $240K was split three different ways. A portion was deposited to Roobet and the rest was converted to XMR"  
[X Link](https://x.com/zachxbt/status/1937121769640599774)  2025-06-23T12:13Z 931.6K followers, 92.3K engagements


"1/ Multiple projects tied to Pepe creator Matt Furie & ChainSaw as well as another project Favrr were exploited in the past week which resulted in $1M stolen My analysis links both attacks to the same cluster of DPRK IT workers who were likely accidentally hired as developers"  
[X Link](https://x.com/zachxbt/status/1938598925004607629)  2025-06-27T14:02Z 931.6K followers, 874.9K engagements


"9/ If you use X search you can clearly see its not the first time Crypto Beast has done this as many old followers got rekt on other bundled rugs $ALPHA $RICH $YE $RUG $ACE $JOHN"  
[X Link](https://x.com/zachxbt/status/1947641116846653546)  2025-07-22T12:53Z 931.6K followers, 70.7K engagements


"Update: OpenVPP appears to potentially be misrepresenting another partnership with Commonwealth Edison (ComEd). When contacted the company stated: We did not partner with them and are not interested"  
[X Link](https://x.com/zachxbt/status/1968704019347484884)  2025-09-18T15:49Z 931.7K followers, 305.1K engagements


"@Steam You clowns allow malware on your platform that has resulted in $150K+ stolen from victims (fake game has been available to download for more than a month)"  
[X Link](https://x.com/zachxbt/status/1969793042531107300)  2025-09-21T15:57Z 931.7K followers, 456K engagements


"9/ Unfortunately the likelihood of this victim seeing any funds recovered is rather low due to a delay in reporting the theft to competent people within the private sector. I recommend victims try to report theft addresses to people as soon as possible as otherwise it can be difficult to detect that a theft even took place. Ripple does not have as good of a support system for victims within their community as there is in Bitcoin Ethereum Solana and major EVM chains. I always try to reply to people who contact me about verified recent thefts $250K to at least instruct them to report and flag"  
[X Link](https://x.com/zachxbt/status/1979899792000958802)  2025-10-19T13:17Z 931.7K followers, 317.3K engagements


"1/ As part of my work I like to test out privacy products and figure out what works and what doesnt so I can abuse any design flaws for my investigations. With the recent hype around Zashi & its Near Intents integration I tested it for Zcash"  
[X Link](https://x.com/zachxbt/status/1980612190609576229)  2025-10-21T12:28Z 931.6K followers, 894.4K engagements


"2/ For this example I bridged X SOL from Solana to Zcash via Near Intents & shielded it after. Source txn from 27sfYM 3R82PEDc1WsvQHbEaEph5igAbfvunWjg3ErpjrAvQ5rzkhcqRkhp9MKocKXMNLAwTNrW2rrP3cicywb2HFcBMxF4 Destination txn to t1MQ9Z 7b7af9aaebf9270bd1f2dafe64beb5dab43ffd178b909e5bbbfc0284d759af26"  
[X Link](https://x.com/zachxbt/status/1980612192907956360)  2025-10-21T12:28Z 931.7K followers, 71.6K engagements


"5/ I contacted the Zashi team and they informed me they plan to solve this privacy issue by adding ephemeral addresses soon and eventually shielded Near Intent refunds. In the meantime I suggest using multiple seeds on separate devices if you use Near Intent integration for Crosspay transfers using your shielded ZEC balance. Overall I still think Zashi is an enjoyable wallet experience for privacy and fixes several UI/UX complaints I had for Monero"  
[X Link](https://x.com/zachxbt/status/1980612202458390867)  2025-10-21T12:28Z 931.7K followers, 259.6K engagements


"i did not call Vultisig a scam i called out the founder for his history of negligence and lack of morals: ThorFi X fig rug via admin key Explicit refusal to return any fees generated on his products from illicit activity (Thorchain Vultisig etc) Associated projects hired DPRK IT workers Personal wallets hacked by DPRK malware after a meeting call scam via Telegram if theres ever any future incidents that are material enough you can be certain he will avoid taking full responsibility"  
[X Link](https://x.com/zachxbt/status/1982068479466652029)  2025-10-25T12:55Z 931.6K followers, 40.8K engagements


"@cecilia_hsueh @TheWhiteWhaleV2 @MEXC_Official Vendor: How many bots do you want MEXC exec: All of them"  
[X Link](https://x.com/zachxbt/status/1983920902501777512)  2025-10-30T15:36Z 931.7K followers, 257.4K engagements


"@BNBCHAIN Thanks I look forward to publishing my upcoming investigation into an exploit"  
[X Link](https://x.com/zachxbt/status/1986041150583845045)  2025-11-05T12:01Z 931.6K followers, 38.2K engagements


"@SBF_FTX ZachXBT says: Riddle me about the $40M transfer to Chinese authorities you hid from the public"  
[X Link](https://x.com/zachxbt/status/1986668053351047293)  2025-11-07T05:32Z 931.7K followers, 262.4K engagements


"Its not super difficult to check -DPRK (Bybit hack Ripio hack Poloniex hack CoinEX hack etc) -Hydra DNM -Josh Jones SIM Swap -Chris Larsen hack -FTX hack -DarkSide ransomware -Abraxas DNM admin (Many millions in deposits from these entities just from checking my old graphs)"  
[X Link](https://x.com/zachxbt/status/1995746465566896567)  2025-12-02T06:46Z 931.6K followers, 6298 engagements


"Stop lying you are a threat actor with a purchased X account thats making a fake story to manipulate public opinion in an attempt to get your funds unfrozen. Since you did not share the full address I went to find it myself and noticed the BUSD originated from a large theft from a business in April 2020. 0x250ea66ec9e17aeb90118995104f8737679427ba Its easily identifiable onchain from irregular CEX withdrawals of multiple assets in a short period and theft addresses were previously flagged"  
[X Link](https://x.com/zachxbt/status/1996597569297002498)  2025-12-04T15:08Z 931.7K followers, 249.8K engagements


"@kyparus InfoFi wants you to think the inorganic AI slop they receive is organically on par with mindshare of the US president"  
[X Link](https://x.com/zachxbt/status/1998090557152002484)  2025-12-08T18:01Z 931.7K followers, 66.1K engagements


"7/ EX 4: Raichu worked with The Game and Dillon Danis to promote Baby Dinger token another scam"  
[X Link](https://x.com/zachxbt/status/1643600924361781252)  2023-04-05T13:06Z 931.6K followers, 45.7K engagements


"A class action lawsuit was filed in Canada against the Boneheads team for the $3.1M NFT rug pull The team quickly disappeared and spent the mint funds on BAYCs luxury goods and other items never fulfilling the roadmap Yet another case where my research has been cited"  
[X Link](https://x.com/zachxbt/status/1677336923336065024)  2023-07-07T15:21Z 931.4K followers, 487.9K engagements


"1/6 My issues with WorldCoin"  
[X Link](https://x.com/zachxbt/status/1683512389105229825)  2023-07-24T16:20Z 931.4K followers, 1.6M engagements


"Only X month has passed and XX of the Solana presale meme coins have been completely abandoned after raising 180650 SOL ($26.7M). Would avoid any future projects launched by these founders"  
[X Link](https://x.com/zachxbt/status/1782130097895477469)  2024-04-21T19:31Z 931.3K followers, 1.3M engagements


"@bitforexcom 1) What"  
[X Link](https://x.com/zachxbt/status/1814314867181965764)  2024-07-19T15:02Z 931.6K followers, 22.2K engagements


"@FatManTerra Finally they got that OTC scammer He stole $7.1M (14.6K TAO) from a TAO whale in February 2024 Also scammed ZYN MOG Kondux Ordiswap Landwolf and Hash AI whales for another $8M+ all this year"  
[X Link](https://x.com/zachxbt/status/1864005956163498170)  2024-12-03T17:57Z 931.5K followers, 75.5K engagements


"@DegenPreacher Ok it did not stop you from messaging me before"  
[X Link](https://x.com/zachxbt/status/1881715665226338384)  2025-01-21T14:49Z 931.5K followers, 147.2K engagements


"11/ I do not blame all Coinbase employees as most of the fault lies on leadership for these decisions. While this post is critical of Coinbase what have they done well providing good stablecoin on-ramp / off-ramp for retail attracting talent to build on Base recovery tool for users who deposit unsupported assets fighting the SEC Coinbase custody product allowing users to passively earn yield on stables easily (Also theres only so much you can do to educate people about threats such as email/call spoofing)"  
[X Link](https://x.com/zachxbt/status/1886412046524129743)  2025-02-03T13:50Z 931.6K followers, 101.4K engagements


"@arkham TLDR myself and Josh from CF connected the Bybit hack on-chain to the Phemex hack"  
[X Link](https://x.com/zachxbt/status/1893034959721386031)  2025-02-21T20:27Z 931.6K followers, 540.1K engagements


"5/ The Celestia address from above transferred small amounts to five instant exchanges from May - July 2025 (Kucoin nested Sideshift Binance nested HTX nested etc) to fund side wallets"  
[X Link](https://x.com/zachxbt/status/1947641067202904158)  2025-07-22T12:53Z 931.4K followers, 75.1K engagements


"6/ Heres a table with Celestia to Solana instant exchange txns I was able to perform timing analysis on. My analysis proves the Crypto Beast public wallet is directly tied to the bundled wallets that sold $ALT on July XX 2025 as the same Celestia address was used to fund all of them"  
[X Link](https://x.com/zachxbt/status/1947641081908101226)  2025-07-22T12:53Z 931.6K followers, 76.3K engagements


"8/ Another sniper cluster did indeed sell $2.6M+ with ties to the ALT deployer address but 45+ wallets directly tied to Crypto Beast sold $11M+ so its only a small part of the story. Additional wallets linked to him still hold 89M+ ALT (10% supply) Wallets still with ALT supply: CniUAh4eY4R79zwgWYKTDji9ek5JQJWkDhjBpoUtm4iV FTXpQmVJqTsWHHgfHGF4Lq9hPXHziY4VUMsjrm7mRhuw CtvxSpBMh2zpzGSqvg35VQwfHWMNP3NEVgKevvDBeJX8 9TyCUafPVVfuoheskjC13Z9uNSW5Ee81TciNuqC3Neg8 72ovyS2Fi6DNSwRPANkSYWmdifgh5Hkgv7W3fpnQkuTn JDeHT66S4JBhDMeE7Lw256Z9Lbbb8g9UcPAP2EtAYyfE 5uZYdrkNcZRpD3qMb6W2J6ZD2dVK3yAay44EhbhRBetQ"  
[X Link](https://x.com/zachxbt/status/1947641104674803910)  2025-07-22T12:53Z 931.6K followers, 74.8K engagements


"@memenetic POV your new meme coin grift is destined for failure due to influencer bukkake 150+ promotional posts from d-tier influencers millions of botted followers and likes only XX SOL raised for the presale few disclosures for the posts"  
[X Link](https://x.com/zachxbt/status/1959237311880966480)  2025-08-23T12:52Z 931.5K followers, 122.9K engagements


"@lookonchain @jpthor Also in a recent documentary about the Bybit hack in an interview he defended DPRKs right to hack/exploit teams"  
[X Link](https://x.com/zachxbt/status/1966427843782750342)  2025-09-12T09:05Z 931.6K followers, 52.2K engagements


"You are supposedly a MEXC exec. Its been X weeks since you publicly acknowledged his posts and multiple months since it was frozen / publicized. Unfreezing an account is the push of a single button. The users whitelisted address was funded via Coinbase and likely not illicit funds. I do not believe the MEXC compliance email excuses as MEXC is known to be uncooperative and rarely is proactive with blocking actual illicit funds and seems to only freeze legitimate profitable user accounts like a bucket shop which gets highlighted by user complaints on CT"  
[X Link](https://x.com/zachxbt/status/1976658410562052590)  2025-10-10T14:37Z 931.4K followers, 42.9K engagements


"@Pirat_Nation Rip Kaito Wallchain Cookie Galxe Layer X users"  
[X Link](https://x.com/zachxbt/status/1980328717118312455)  2025-10-20T17:42Z 931.6K followers, 222.3K engagements


"@MEXC_Official Transparency question: Why does MEXC hide its beneficial owner from the public cc @cecilia_hsueh"  
[X Link](https://x.com/zachxbt/status/1984248539640365449)  2025-10-31T13:18Z 931.6K followers, 142K engagements


"Sad how antiquated laws allow bad actors to continually abuse inefficiencies within crypto from different jurisdictions. If you promote a project tied to the value of tokens and little to nothing is delivered thus leading to serious financial harm you should be held accountable. Its common sense and this was a simple case. Only further exposes how democracy is a broken system"  
[X Link](https://x.com/zachxbt/status/1984850324398743748)  2025-11-02T05:09Z 931.6K followers, 376.1K engagements


"@innercitypress Sent $XXX and I hope others contribute small amounts as well. You were the only one providing in depth coverage on the recent Samourai Wallet & $25M MEV Bot cases. Feels like overall crypto media is in a sad state and only reposts original content nowadays"  
[X Link](https://x.com/zachxbt/status/1987436481900941682)  2025-11-09T08:25Z 931.5K followers, 77K engagements


"@al_nechaev @Cbb0fe How are you not embarrassed to found a VC fund just to spam AI generated slop 24/7"  
[X Link](https://x.com/zachxbt/status/1988985836818538940)  2025-11-13T15:02Z 931.5K followers, 8099 engagements


"@bubblemaps @aPriori Still no reply from the co-founder the way they have given zero transparency makes them look no different from scammers"  
[X Link](https://x.com/zachxbt/status/1990725991396684226)  2025-11-18T10:17Z 931.5K followers, 166.1K engagements


"2/ Incident Summary: On August XX 2024 the threat actors targeted a single Genesis creditor by: 1) Calling as Google Support via spoofed number to compromise personal accounts 2) Calling after as Gemini support claiming account is hacked 3) Social engineered victim into resetting 2FA and sending Gemini funds to compromised wallet 4) Got victim to use AnyDesk to share screen and leaked private keys from Bitcoin core. Gemini txn hash XXXXX BTC - Aug XX at 1:48 am UTC e747b963a463334c164b0a8fff844f73693272bb2b331adbe2147d70ec196360 XXXXX BTC - Aug XX at 2:30 am UTC"  
[X Link](https://x.com/zachxbt/status/1836752940029149269)  2024-09-19T13:03Z 931.7K followers, 1.1M engagements


"12/ With the assistance of @CFInvestigators @zeroshadow_io and the Binance Security Team more than $9M+ has been frozen and $500K+ has already been returned back after working closely with the victim to investigate the incident"  
[X Link](https://x.com/zachxbt/status/1836753455366467803)  2024-09-19T13:05Z 931.7K followers, 520.8K engagements


"1/2 I uncovered XX high confidence wallets tied to @MustStopMurad holding $24M in meme coins on Ethereum and Solana so the community can monitor his future activity"  
[X Link](https://x.com/zachxbt/status/1843940648430493906)  2024-10-09T09:04Z 931.7K followers, 3.2M engagements


"5/ When reviewing blockchain data tied to Yicong Wang you will notice high illicit fund exposure from the Alex Labs Irys co-founder and a consolidation of other hacks (EasyFi Bondly Maverick co-founder etc)"  
[X Link](https://x.com/zachxbt/status/1849071135507267614)  2024-10-23T12:51Z 931.6K followers, 84K engagements


"Update: Wiz (Veer Chetal) was arrested by US Marshalls and here is his mug shot"  
[X Link](https://x.com/zachxbt/status/1904581571660706277)  2025-03-25T17:10Z 931.7K followers, 461.3K engagements


"Heres my investigation from last year in case you are unfamiliar"  
[X Link](https://x.com/zachxbt/status/1947139100642828423)  2025-07-21T03:38Z 931.6K followers, 286.7K engagements


"0x8d0a is an interesting wallet as they were also directly involved in the $HIFI Binance delisting pump and dump last month. 0x8d0a received dust from XX addresses linking XX of the perpetrators Binance deposit addresses used for $HIFI manipulation. 0xb42dba0088c1b2435af4b71613314c5897d08d77 0x531d9ceaecba84067b5bbf8617811a3513b79470 0x67f7fecfa1cda20930185f8810cce1a6972f352c 0x782a26a8845ba02eb8af537918ede35eabc14dd6 0xcedfef02c2e05ec4c24b8e3271725e673db6695e 0xdfbad887f3dacff93ab0fecf19d89d7940d7787c 0xd1ebf0b3a6b453bec246b9eb32d503ef46c16a68 0xcca4ed05987bca2e48ebbb359c0685303f48e605"  
[X Link](https://x.com/zachxbt/status/1977070305626775878)  2025-10-11T17:54Z 931.7K followers, 54.4K engagements


"@stablealt @HyperliquidX HypurrScan team deserves hundreds of lashes for fumbling their early mover advantage and overlooking basic features EX: The Unit protocol address is not even publicly tagged when they are one of the largest HL protocols"  
[X Link](https://x.com/zachxbt/status/1978374388970889669)  2025-10-15T08:16Z 931.6K followers, 20K engagements


"7/ The XRP victim mentioned in a later video how they could not quickly get in touch with US law enforcement for a $3M theft. Theres few LE qualified to handle such cases and endless victim reports so naturally incidents are overlooked. In general US Netherlands Singapore France etc have been better jurisdictions for victims to work with from my experience though it ultimately depends who is assigned to the case. It becomes much more unreliable in other jurisdictions and it is extremely costly to go the civil route"  
[X Link](https://x.com/zachxbt/status/1979899785617305779)  2025-10-19T13:17Z 931.7K followers, 99.9K engagements


"@Cointelegraph Smoking crack is likely safer than trusting WazirX"  
[X Link](https://x.com/zachxbt/status/1981812726981902706)  2025-10-24T19:59Z 931.6K followers, 122.8K engagements


"@0xMert_ this is organic PA"  
[X Link](https://x.com/zachxbt/status/1988925288458383681)  2025-11-13T11:01Z 931.6K followers, 45.6K engagements


"Lets do a bit of napkin math For the World Liberty Financial token sale $550M was raised Warren & Reed accuse $10K of being raised from illicit sources Thats only XXXXXX% of the token sale Warren previously claimed she was Native American Test results estimated she is only XXXXX% Native American At least she is consistent when it comes to incorrectly stating things are statistically significant (As a disclaimer I hold zero WLFI / did not invest in the token sale)"  
[X Link](https://x.com/zachxbt/status/1990795404976197696)  2025-11-18T14:53Z 931.6K followers, 137.7K engagements


"@neil_xbt I just followed the money and determined you should never write a thread again. 0x063e is an exchange address related to the service Sardine"  
[X Link](https://x.com/zachxbt/status/1662574206251409408)  2023-05-27T21:39Z 931.6K followers, 251K engagements


"10/ A cluster of eth addresses tied to both Box/Wiz received $41M+ from two exchanges over the past few weeks primarily flowing to luxury goods brokers to purchase cars watches jewelry and designer clothes. This is also backed up by what was said in chats about spending the funds"  
[X Link](https://x.com/zachxbt/status/1836753438119469426)  2024-09-19T13:05Z 931.7K followers, 656.4K engagements


"@IamNomad Just going off of memory Raid Party was $70M Bored Bunny was $21M Metacard was $23M Apes In Space was $10.8M"  
[X Link](https://x.com/zachxbt/status/1845186213646360690)  2024-10-12T19:34Z 931.6K followers, 24.2K engagements


"Nine hours ago a suspicious transfer was made from a potential victim for 3520 BTC ($330.7M) Theft address bc1qcrypchnrdx87jnal5e5m849fw460t4gk7vz55g Shortly after the funds began to be laundered via 6+ instant exchanges and was swapped for XMR causing the XMR price to spike 50%"  
[X Link](https://x.com/zachxbt/status/1916756932763046273)  2025-04-28T07:30Z 931.7K followers, 3.5M engagements


"@MEXC_Official @Gate_io Update: Ildar Ilham aka @XBT_Prometheus (founder of @WhiteRock_Fi) was arrested by UAE law enforcement for his involvement in the $30M Zkasino exit scam. He will be extradited to the Netherlands next for the criminal case"  
[X Link](https://x.com/zachxbt/status/1940767194931253529)  2025-07-03T13:38Z 931.7K followers, 365.6K engagements


"4/ I observed LedZo5 was funded via instant exchange so I traced back from the funding txns to the Celestia address below by performing a timing analysis. celestia1chflqywwp0k8rjzgp3w4447fquyk9ynnc6zws5"  
[X Link](https://x.com/zachxbt/status/1947641056188633139)  2025-07-22T12:53Z 931.7K followers, 80.4K engagements


"1/ An unnamed source recently compromised a DPRK IT worker device which provided insights into how a small team of five ITWs operated 30+ fake identities with government IDs and purchased Upwork/LinkedIn accounts to obtain developer jobs at projects"  
[X Link](https://x.com/zachxbt/status/1955613912201896113)  2025-08-13T12:54Z 931.6K followers, 1M engagements


"@inversebrah These botted milady meme coin KOL scammer accounts that keep appearing out of nowhere are so annoying"  
[X Link](https://x.com/zachxbt/status/1964634423556788684)  2025-09-07T10:18Z 931.6K followers, 41.9K engagements


"1/ A video went viral on YT this week after a US based victim lost $3.05M (1.2M XRP) from their Ellipal wallet. Heres the tracing of where the stolen funds ended up and the biggest takeaways for similar thefts"  
[X Link](https://x.com/zachxbt/status/1979899767212699910)  2025-10-19T13:17Z 931.7K followers, 980.2K engagements


"4/ My order completed after several minutes but the issue is a Near Intents refund txn of XXXXXXXX ZEC was also made to my t - address I initially shielded from which establishes a clear link between my addresses. Someone can simply match up timing/amounts from the Near Intents address and identify ZEC refund txns allowing someone to deanonymize your t-address you intially shielded ZEC from since it is static and refunds are not shielded. Refund txn to t1MQ9Z cf1d5ac83394ed21dd43f123b37e94826b46cd524d045e94165f81a774153953 Near Intents Zcash address t1Ku2KLyndDPsR32jwnrTMd3yvi9tfFP8ML"  
[X Link](https://x.com/zachxbt/status/1980612198926868907)  2025-10-21T12:28Z 931.7K followers, 156.3K engagements


"6/ I wanted to make this post so more people do not continue the privacy mistake of accidentally revealing their transparent address when bridging with shielded ZEC until a Zashi update is implemented. Should I do more posts like this in the future about how to maintain proper onchain opsec I am considering to offer a service for individual traders or boutique funds looking to anonymize their activity to reduce the chances of being fingerprinted onchain. If you're potentially interested send me a DM to see how we can work together. Do not contact me if you are a threat actor looking to"  
[X Link](https://x.com/zachxbt/status/1980612205486690606)  2025-10-21T12:28Z 931.7K followers, 214.9K engagements


"@WBLands_ @Paxos @paxoslabs They thought tagging me would help the situation"  
[X Link](https://x.com/zachxbt/status/1996598970433380376)  2025-12-04T15:14Z 931.7K followers, 35.7K engagements


"@karbonbased Funny how under this post theres more slop replies. Inf0Fi projects like Kait0 Y@ps G@lxe L@yer3 Cook1e W@llchain have caused so much harm by incentivizing AI bot networks. We need to be able to hide accounts / posts by country at minimum"  
[X Link](https://x.com/zachxbt/status/1997953937488719975)  2025-12-08T08:58Z 931.7K followers, 379.3K engagements


"4/ An initial tracing showed $243M split multiple ways between each party before funds quickly peeled off to 15+ exchanges immediately swapping back and forth between Bitcoin Litecoin Ethereum and Monero"  
[X Link](https://x.com/zachxbt/status/1836753196053602525)  2024-09-19T13:04Z 931.7K followers, 792.5K engagements


"5/ Wiz (Veer) received a large % cut from theft and slipped up during screenshare by leaking his full name during the theft. Additional comfort was gained as throughout multiple recordings accomplices referred to him as Veer on audio and in chats. $34.5M of his funds sit here 0x3c7a5f2795e73d2b94a9120a643f608cfc45c935"  
[X Link](https://x.com/zachxbt/status/1836753207436927042)  2024-09-19T13:04Z 931.6K followers, 879.1K engagements


"6/ Wizs friend Light/Dark (Aakaash) helped launder the funds for him using eXch and Thorswap. Similar to Wiz he also leaked his name during screen share. Wiz TC Destination address confirmed in video 0xa212d7441fed6db9ab666ba34e8c440c565f4af8"  
[X Link](https://x.com/zachxbt/status/1836753381412536711)  2024-09-19T13:05Z 931.7K followers, 928.5K engagements


"Heres a long list of XX NFT projects I did investigations on: Animoon - $6.3M Winter Bears - $3.4M XXX projects - $13M Rogue Society - $5.5M Rich Dwarves Tribe - $3.04M Boneheads - $3.1M Real Floyd NFT - $5M Croatia NFT scam group - $2.8M Rich Bulls Clubs - $3.4M MEE6 - $3M Eternal Beings - $4M Ether Monkeys - $2.8M Swipa The Fox - $1.75M Tribes of Ogun - $700K Billionaire Dogs Club - $960K Crazy Camels - $1.6M Rich Kids - $2M Fashion Ape - $1.1M Trollz- $4M Various NFT projects - $3.7M Players Only - $1.4M Vault of gems - $1M 0xCryatals - $1M Miss Universe - $370K Apes In Space - $10.8M"  
[X Link](https://x.com/zachxbt/status/1845197031427670048)  2024-10-12T20:17Z 931.7K followers, 62.6K engagements


"4/ Recently they reached back out after having been approached by Yicong Wang for a larger USDT - CNY order on August XX 2024 involving 1.5M USDT at a rate much lower than the market rate. THjaAygUNkzoXufwEoKCzbUZHpsehL9rAZ"  
[X Link](https://x.com/zachxbt/status/1849071120021909931)  2024-10-23T12:51Z 931.6K followers, 83.1K engagements


"1/ An investigation into the alleged identity of the mysterious Hyperliquid whale tied to illicit activity that profited $20M via highly leveraged positions over the past couple weeks"  
[X Link](https://x.com/zachxbt/status/1902713021937426495)  2025-03-20T13:25Z 931.6K followers, 2.6M engagements


"6/ An unnamed source provided a personal email of an account that interacted multiple time with the WhiteRock deployer address. I noticed the email has an account on Chess(.)com with the username IldarTheGrandMaster. Prometheus from Zkasino = Ildar Whiterock alias = Goedel goedel014@gmail(.)com"  
[X Link](https://x.com/zachxbt/status/1934616677473534266)  2025-06-16T14:18Z 931.6K followers, 99.4K engagements


"1/ An investigation into how @cryptobeastreal scammed followers by lying they were not behind the $190M - $3M $ALT market cap crash where 45+ connected insider wallets sold $11M+ on July XX 2025"  
[X Link](https://x.com/zachxbt/status/1947641028720398488)  2025-07-22T12:53Z 931.6K followers, 1.3M engagements


"The affidavit confirmed all of the victims from my investigation Victim X = Beeple Victim X = DeeKay Victim X = Zeneca Victim X = Nouns DAO Victim X = JRNY Club"  
[X Link](https://x.com/zachxbt/status/1950526073055150546)  2025-07-30T11:57Z 931.7K followers, 156.9K engagements


"This week the project @OpenVPP ($OVPP) claimed to be working with the US government on the tokenization of energy. XX hrs ago Hester Pierce replied saying she does not work alongside or endorse private crypto projects. OpenVPP then hid her reply from the post. I reviewed the accounts promoting OpenVPP and its the usual influencer suspects"  
[X Link](https://x.com/zachxbt/status/1968338476027580483)  2025-09-17T15:37Z 931.6K followers, 806.3K engagements


"Whats most interesting is wallet addresses listed in the US government $14B (127K BTC) seizure previously were named in a Milky Sad report X years ago for having vulnerable private keys and now the USG says they have custody of them"  
[X Link](https://x.com/zachxbt/status/1978124927162098025)  2025-10-14T15:45Z 931.6K followers, 632.9K engagements


"11/ Earlier this year a civil lawsuit was filed against multiple suspects based on these findings. An interesting bit taken from the defendants statements is highlighted below where Rusty (Ayden B) admits ownership of several wallets I identified though denies involvement. 0xJones (Jon L) another alleged suspect previously applied for a role at OTF as friends with Rusty and deleted messages from the Bittensor Discord and deactivated his X account after the incident"  
[X Link](https://x.com/zachxbt/status/1978465858604453944)  2025-10-15T14:19Z 931.7K followers, 103.3K engagements


"4/ The funds consolidated on Tron at the following address on Oct XX. TGF3hP5GeUPKaRJeWKpvF2PVVCMrfe2bYw By Oct XX the funds were completely laundered away to OTCs adjacent to Huione (illicit online marketplace in SEA)"  
[X Link](https://x.com/zachxbt/status/1979899775374827833)  2025-10-19T13:17Z 931.6K followers, 103.6K engagements


"Anyone else have stablecoin ticker fatigue Imagine you receive USDPT to your Solana address but realize your wallet doesnt have USDPT on default token list. You also need gas so you bridge ETH from Ethereum and wait several minutes and want to swap USDPT for USD on CEX but your preferred CEX doesnt support USDPT so you swap on chain for USDT but realize the CEX conversion for USDT to USD is not 1:1 on Solana and wire transfer takes days so you bridge to Tron and realize you dont have TRX so you bridge gas from SOL but realize the bridge has a minimum so you bridge more ETH. Your MetaMask"  
[X Link](https://x.com/zachxbt/status/1984211750351446269)  2025-10-31T10:52Z 931.7K followers, 260.4K engagements


"@zoomerfied Isnt Basic Markets TedTalksMacros TraderSkews & CryptoBooles project"  
[X Link](https://x.com/zachxbt/status/1991527073979281425)  2025-11-20T15:20Z 931.7K followers, 55.2K engagements


"@Europol Rip @jessepollak"  
[X Link](https://x.com/zachxbt/status/1995513943469752761)  2025-12-01T15:22Z 931.7K followers, 138.2K engagements


"@coffeebreak_YT Mumu ogun thunderstrike you and your family David"  
[X Link](https://x.com/zachxbt/status/1995564726785638503)  2025-12-01T18:44Z 931.7K followers, 442K engagements


"@toplonging @Ledger @Lamborghini Imagine all of the future meme coin traders getting robbed at gunpoint in a rented bright green Lamborghini Huracan with their Lamborghini Ledger while streaming irl on Pump Fun live"  
[X Link](https://x.com/zachxbt/status/1996561229511561299)  2025-12-04T12:44Z 931.7K followers, 29.6K engagements


"@astr0xgen @Ledger @Lamborghini Most of the home invasion cases are currently happening in Western Europe (UK France etc)"  
[X Link](https://x.com/zachxbt/status/1996562087901004116)  2025-12-04T12:47Z 931.7K followers, 11K engagements


"@Kryptonomanos @karbonbased Blocked"  
[X Link](https://x.com/zachxbt/status/1997954693419733478)  2025-12-08T09:01Z 931.7K followers, 23.1K engagements


"@randhindi @zama Stop the inorganic AI slop 1nfoF1 campaigns. Theres no way you actually believe you have more mindshare on X than some of the most well known names globally. No wonder people do not take our industry seriously"  
[X Link](https://x.com/zachxbt/status/1998116731374764519)  2025-12-08T19:45Z 931.7K followers, 113.3K engagements


"Update: A superseding indictment from a few hours ago confirmed my analysis that Danny / Danish Zulfiqar (Khan) was arrested in Dubai. Seizure address 0xb37d617716e46511E56FE07b885fBdD70119f768"  
[X Link](https://x.com/zachxbt/status/1998267579136455090)  2025-12-09T05:44Z 931.7K followers, 112.9K engagements


"@based16z @JustinBarlow @whop I think its unfortunate people have that association as platform defining The entire Whop YT interviews series has been marketing many more guru grifters like Brez Scales Jordan Welch etc. Your brand is reflected by those who you associate yourself with publicly"  
[X Link](https://x.com/zachxbt/status/1998634337672306790)  2025-12-10T06:02Z 931.7K followers, 12.3K engagements