Binance Square

zachxbt

203,599 views
246 Discussing
KEVLI
·
--
Bullish
🚨 UPDATE: ZachXBT says the threat actor who stole $40M+ from US government seizure addresses is the son of the owner of CMMDS. CMMDS is a company contracted to help USMS manage seized crypto assets. News | Markets | YouTube #zachxbt
🚨 UPDATE: ZachXBT says the threat actor who stole $40M+ from US government seizure addresses is the son of the owner of CMMDS.

CMMDS is a company contracted to help USMS manage seized crypto assets.

News | Markets | YouTube

#zachxbt
When Flexing Goes Very, Very Wrong🥶 This one’s wild. A threat actor going by John got baited into one of those pointless “band for band” flex games… and somehow thought it was a good idea to live-share his wallets. Yeah. That happened. Once the addresses were out in the open, on-chain sleuths didn’t waste a second. According to tracing work by #zachxbt , those wallets line up with some seriously heavy stuff ... large suspected thefts, and even funds connected to a U.S. government seizure tied back to Bitfinex. Not exactly pocket change nor exactly clean either. All because of ego and a moment of “watch this.” Crypto never fails to remind people: the chain remembers everything, and flexing is expensive. Wallet that kicked off the mess: 0x8924B17fD7512953949DE703a7C97484E66E0Bec Note: news source Zachxbt.
When Flexing Goes Very, Very Wrong🥶
This one’s wild. A threat actor going by John got baited into one of those pointless “band for band” flex games… and somehow thought it was a good idea to live-share his wallets. Yeah. That happened.

Once the addresses were out in the open, on-chain sleuths didn’t waste a second. According to tracing work by #zachxbt , those wallets line up with some seriously heavy stuff ... large suspected thefts, and even funds connected to a U.S. government seizure tied back to Bitfinex. Not exactly pocket change nor exactly clean either.

All because of ego and a moment of “watch this.” Crypto never fails to remind people: the chain remembers everything, and flexing is expensive.

Wallet that kicked off the mess:
0x8924B17fD7512953949DE703a7C97484E66E0Bec

Note: news source Zachxbt.
·
--
Bullish
🚨 Breaking News – Special Coverage – Developing Story 🚨 New York City — 10:58 PM EST Monero (XMR) has officially blasted into a new all‑time high this week, soaring to ~$797–$798 and marking one of the most dramatic privacy‑coin rallies in recent history 🌑🚀. According to several market reports, the surge pushed XMR nearly 80% above its recent weekly lows, putting the token at the center of global attention as on‑chain analysts raced to understand what triggered such an explosive move. [theblock.co], [cryptowatchdaily.com] $YFI {future}(YFIUSDT) In a rapid follow‑up investigation, renowned crypto sleuth ZachXBT linked the sudden price spike to a $282M multi‑chain theft, where stolen BTC and LTC were funneled covertly into Monero through multiple instant‑swap platforms 🔍💥. $ZEC {future}(ZECUSDT) The attacker, who executed a sophisticated social‑engineering hardware‑wallet scam on January 10, began aggressively converting the stolen funds into XMR, generating massive buy‑side pressure and overwhelming the coin’s liquidity — a move that analysts say likely served as a key catalyst behind the sudden ATH breakout. [cryptobriefing.com], [ainvest.com] $XMR {future}(XMRUSDT) The laundering flow, routed partly through THORChain and various exchange pathways, created an artificial supply squeeze that amplified Monero’s vertical move, with prices stabilizing afterward in the $670–$700 range, still up significantly from pre‑incident levels ⚡📈. The investigation is ongoing, with ZachXBT tracking multiple suspected wallets as the market digests the implications of one of the largest theft‑linked price dislocations in recent memory. [cryptowatchdaily.com] #MoneroATH #ZachXBT #PrivacyCoins #CryptoBreakingNews 🕵️‍♂️🔥📊🚨
🚨 Breaking News – Special Coverage – Developing Story 🚨

New York City — 10:58 PM EST

Monero (XMR) has officially blasted into a new all‑time high this week, soaring to ~$797–$798 and marking one of the most dramatic privacy‑coin rallies in recent history 🌑🚀.

According to several market reports, the surge pushed XMR nearly 80% above its recent weekly lows, putting the token at the center of global attention as on‑chain analysts raced to understand what triggered such an explosive move. [theblock.co], [cryptowatchdaily.com]
$YFI
In a rapid follow‑up investigation, renowned crypto sleuth ZachXBT linked the sudden price spike to a $282M multi‑chain theft, where stolen BTC and LTC were funneled covertly into Monero through multiple instant‑swap platforms 🔍💥.
$ZEC
The attacker, who executed a sophisticated social‑engineering hardware‑wallet scam on January 10, began aggressively converting the stolen funds into XMR, generating massive buy‑side pressure and overwhelming the coin’s liquidity — a move that analysts say likely served as a key catalyst behind the sudden ATH breakout. [cryptobriefing.com], [ainvest.com]
$XMR
The laundering flow, routed partly through THORChain and various exchange pathways, created an artificial supply squeeze that amplified Monero’s vertical move, with prices stabilizing afterward in the $670–$700 range, still up significantly from pre‑incident levels ⚡📈.

The investigation is ongoing, with ZachXBT tracking multiple suspected wallets as the market digests the implications of one of the largest theft‑linked price dislocations in recent memory. [cryptowatchdaily.com]

#MoneroATH #ZachXBT #PrivacyCoins #CryptoBreakingNews 🕵️‍♂️🔥📊🚨
🇺🇸🚨 ZachXBT Alleges $40M Crypto Theft Linked to U.S. Seized Assets $NOM Blockchain investigator ZachXBT has alleged that John Daghita stole over $40 million in crypto connected to U.S. government–seized assets. According to the claim, Daghita is the son of the CMDSS CEO, a firm that reportedly received a government contract to manage seized cryptocurrency. $ZKC If verified, this raises serious concerns around custody risk, insider access, and oversight failures in government-controlled crypto holdings. Any breach in seized-asset management undermines institutional trust and could accelerate demand for transparent, on-chain proof-of-reserves solutions. $AUCTION 📰 Source: ZachXBT (on-chain investigation) ⚠️ Allegations — investigation ongoing #CryptoNews #Blockchain #ZachXBT #USGovernment
🇺🇸🚨 ZachXBT Alleges $40M Crypto Theft Linked to U.S. Seized Assets
$NOM
Blockchain investigator ZachXBT has alleged that John Daghita stole over $40 million in crypto connected to U.S. government–seized assets. According to the claim, Daghita is the son of the CMDSS CEO, a firm that reportedly received a government contract to manage seized cryptocurrency.
$ZKC
If verified, this raises serious concerns around custody risk, insider access, and oversight failures in government-controlled crypto holdings. Any breach in seized-asset management undermines institutional trust and could accelerate demand for transparent, on-chain proof-of-reserves solutions.
$AUCTION
📰 Source: ZachXBT (on-chain investigation)
⚠️ Allegations — investigation ongoing

#CryptoNews #Blockchain #ZachXBT #USGovernment
DASHUSDT
Opening Short
Unrealized PNL
+39.00%
The U.S. government crypto wallet worth $40 million was stolen, and ZachXBT pointed out that the suspect is John Daghita, the son of the executive of the seized crypto contractor CMDSS (online name Lick)! The involved funds exceed $90 million and are also linked to the 2016 Bitfinex seized wallet. CMDSS has long been questioned due to its qualifications and conflicts of interest, and the management of crypto assets by the U.S. Marshals Service is riddled with loopholes, even the amount of Bitcoin held cannot be estimated 😱 #加密货币盗窃 #zachxbt
The U.S. government crypto wallet worth $40 million was stolen, and ZachXBT pointed out that the suspect is John Daghita, the son of the executive of the seized crypto contractor CMDSS (online name Lick)!

The involved funds exceed $90 million and are also linked to the 2016 Bitfinex seized wallet. CMDSS has long been questioned due to its qualifications and conflicts of interest, and the management of crypto assets by the U.S. Marshals Service is riddled with loopholes, even the amount of Bitcoin held cannot be estimated 😱

#加密货币盗窃 #zachxbt
$90 MILLION HACKER EXPOSED. GOVERNMENT FUNDS LINKED. Entry: 0.65 🟩 Target 1: 0.72 🎯 Target 2: 0.80 🎯 Stop Loss: 0.60 🛑 This hacker thought he could flex. He was wrong. ZachXBT just pulled back the curtain on a $90 million wallet. Funds traced back to seized government assets. On-chain never lies. Dirty money is always exposed. Don't be the next one caught showing off. Blockchain is unforgiving. Disclaimer: For informational purposes only. Not investment advice. #crypto #blockchain #hack #ZachXBT 🚨
$90 MILLION HACKER EXPOSED. GOVERNMENT FUNDS LINKED.

Entry: 0.65 🟩
Target 1: 0.72 🎯
Target 2: 0.80 🎯
Stop Loss: 0.60 🛑

This hacker thought he could flex. He was wrong. ZachXBT just pulled back the curtain on a $90 million wallet. Funds traced back to seized government assets. On-chain never lies. Dirty money is always exposed. Don't be the next one caught showing off. Blockchain is unforgiving.

Disclaimer: For informational purposes only. Not investment advice.

#crypto #blockchain #hack #ZachXBT 🚨
ZACHXBT SLAMS LEDGER OVER DATA BREACHES AND USER LOSSES On-chain investigator #ZachXBT publicly criticized #Ledger , accusing the hardware wallet maker of repeated data leaks that exposed user privacy and allegedly led to “millions of dollars” in losses. He also questioned Ledger’s decision to charge users for clear signing while reportedly planning a U.S. #IPO , arguing the move prioritizes value extraction over user protection. #Privacy #cryptoscam
ZACHXBT SLAMS LEDGER OVER DATA BREACHES AND USER LOSSES

On-chain investigator #ZachXBT publicly criticized #Ledger , accusing the hardware wallet maker of repeated data leaks that exposed user privacy and allegedly led to “millions of dollars” in losses.

He also questioned Ledger’s decision to charge users for clear signing while reportedly planning a U.S. #IPO , arguing the move prioritizes value extraction over user protection.

#Privacy #cryptoscam
🚀 ZachXBT strikes again: Identifying the hacker's wallet linked to stolen/confiscated assets from Bitfinex! 🕵️‍♂️ Famous on-chain detective ZachXBT takes action once more, revealing the connection between the "government hacker" and the cryptocurrency assets seized by U.S. authorities. This thrilling blockchain story begins with a simple argument in a group chat. 📍 Incident review: A criminal suspect using the alias John and Lick flaunts his cryptocurrency balance in a group chat. The screenshot of his Exodus wallet shows a rapid increase in funds: from an initial $2.3 million to later $6.7 million, ultimately reaching an astonishing $23 million. 🔍 Is the clue pointing to the U.S. government? ZachXBT conducted a reverse analysis of the transactions, mapping out the complete flow of funds: John's address (0xd8bc) is linked to another wallet (0x8924), which received funds from address 0xc7a2. Here's the key point: it was this 0xc7a2 address that received $24.9 million directly from a wallet controlled by the U.S. government in March 2024 (this fund was seized in the 2016 Bitfinex hacking case). It is worth mentioning that as early as 2024, the U.S. government's wallet was hacked, and around $20 million of confiscated assets was stolen. Now, it seems we know who the mastermind is. 🎮 Hacker's provocative actions Right after ZachXBT released the investigation report, John immediately used an exposed address to send a small transaction to ZachXBT's public address (zachxbt.eth). This can be seen as a “greeting” to the detective, indirectly confirming his control over these assets. 💰 Result: In the associated wallet, over $63 million flowing in by the end of 2025 was discovered, along with a recent transfer of 4,170 ETH (approximately $12.4 million) from a centralized exchange on January 22. This story teaches us: talking too much (and sending random screenshots) can expose even the biggest players. #ZachXBT #Bitfinex #黑客 #加密安全 #以太坊 {spot}(BNBUSDT) {spot}(BTCUSDT)
🚀 ZachXBT strikes again: Identifying the hacker's wallet linked to stolen/confiscated assets from Bitfinex! 🕵️‍♂️
Famous on-chain detective ZachXBT takes action once more, revealing the connection between the "government hacker" and the cryptocurrency assets seized by U.S. authorities. This thrilling blockchain story begins with a simple argument in a group chat.
📍 Incident review:
A criminal suspect using the alias John and Lick flaunts his cryptocurrency balance in a group chat. The screenshot of his Exodus wallet shows a rapid increase in funds: from an initial $2.3 million to later $6.7 million, ultimately reaching an astonishing $23 million.
🔍 Is the clue pointing to the U.S. government?
ZachXBT conducted a reverse analysis of the transactions, mapping out the complete flow of funds:
John's address (0xd8bc) is linked to another wallet (0x8924), which received funds from address 0xc7a2. Here's the key point: it was this 0xc7a2 address that received $24.9 million directly from a wallet controlled by the U.S. government in March 2024 (this fund was seized in the 2016 Bitfinex hacking case).
It is worth mentioning that as early as 2024, the U.S. government's wallet was hacked, and around $20 million of confiscated assets was stolen. Now, it seems we know who the mastermind is.
🎮 Hacker's provocative actions
Right after ZachXBT released the investigation report, John immediately used an exposed address to send a small transaction to ZachXBT's public address (zachxbt.eth). This can be seen as a “greeting” to the detective, indirectly confirming his control over these assets.
💰 Result: In the associated wallet, over $63 million flowing in by the end of 2025 was discovered, along with a recent transfer of 4,170 ETH (approximately $12.4 million) from a centralized exchange on January 22.
This story teaches us: talking too much (and sending random screenshots) can expose even the biggest players.
#ZachXBT #Bitfinex #黑客 #加密安全 #以太坊
On-chain Tracking: 23 million dollars in unusual movements! Mysterious hacker 'J0hn' surfaces, previously involved in the U.S. government theft?On-chain security alert! Top detective ZachXBT strikes again, exposing a high-risk threat actor codenamed J0hn (Lick). 🔍 Core Intelligence Express: 1. Huge Asset Transfers: Recently, multiple wallet addresses controlled by J0hn have seen intense fund movements, involving a total of approximately 23 million dollars in cryptocurrency assets. 2. Related to the 'U.S. Government Theft Case': The key information is that these addresses are directly related to an astonishing suspected theft case in 2024, during which the U.S. government faced a financial loss of over 90 million dollars. 3. Victim Range Expanding: Investigations show that this hacker is not only targeting large institutions, but the flow of funds is also related to the assets of several undisclosed identity victims during the period from November to December 2025.

On-chain Tracking: 23 million dollars in unusual movements! Mysterious hacker 'J0hn' surfaces, previously involved in the U.S. government theft?

On-chain security alert! Top detective ZachXBT strikes again, exposing a high-risk threat actor codenamed J0hn (Lick).

🔍 Core Intelligence Express:

1. Huge Asset Transfers: Recently, multiple wallet addresses controlled by J0hn have seen intense fund movements, involving a total of approximately 23 million dollars in cryptocurrency assets.

2. Related to the 'U.S. Government Theft Case': The key information is that these addresses are directly related to an astonishing suspected theft case in 2024, during which the U.S. government faced a financial loss of over 90 million dollars.

3. Victim Range Expanding: Investigations show that this hacker is not only targeting large institutions, but the flow of funds is also related to the assets of several undisclosed identity victims during the period from November to December 2025.
🚨 Warning: Fake 'Technical Support' Scams Result in Huge Losses of $282 Million! 🚨 On-chain detective ZachXBT recently revealed a shocking social engineering attack: a user lost as much as 1459 BTC and 2,050,000 LTC, totaling approximately $282 million, after being misled by a fake Trezor customer service representative. Incident Review: Fatal Mistake: The victim provided the hardware wallet's **Seed Phrase** to a scammer posing as an official support staff. Asset Laundering: The hacker used the THORChain protocol to exchange assets for the anonymous coin Monero (XMR), temporarily causing a spike in XMR. Partial Recovery: Thanks to the efforts of ZeroShadow experts, about $700,000 has been tracked and frozen — this is just a drop in the bucket compared to the total loss. Core Anti-Scam Reminders: ❌ Never Share Your Seed Phrase: No official customer service (whether Trezor, Ledger, or Binance) will ever ask you for your seed phrase or private key. ❌ Hardware Wallets Are Not Foolproof: If you voluntarily hand over the 'keys', even the safest cold wallet becomes useless. ❌ Be Cautious of Social Engineering: Any 'customer service' that contacts you should raise a red flag. In the crypto world, safety comes first. Please protect your private keys!🛡️ #诈骗警示 #安全第一 #比特币 #莱特币 #ZachXBT {spot}(ETHUSDT) {spot}(SOLUSDT) {spot}(BTCUSDT)
🚨 Warning: Fake 'Technical Support' Scams Result in Huge Losses of $282 Million! 🚨
On-chain detective ZachXBT recently revealed a shocking social engineering attack: a user lost as much as 1459 BTC and 2,050,000 LTC, totaling approximately $282 million, after being misled by a fake Trezor customer service representative.
Incident Review:
Fatal Mistake: The victim provided the hardware wallet's **Seed Phrase** to a scammer posing as an official support staff. Asset Laundering: The hacker used the THORChain protocol to exchange assets for the anonymous coin Monero (XMR), temporarily causing a spike in XMR. Partial Recovery: Thanks to the efforts of ZeroShadow experts, about $700,000 has been tracked and frozen — this is just a drop in the bucket compared to the total loss.
Core Anti-Scam Reminders:
❌ Never Share Your Seed Phrase: No official customer service (whether Trezor, Ledger, or Binance) will ever ask you for your seed phrase or private key.
❌ Hardware Wallets Are Not Foolproof: If you voluntarily hand over the 'keys', even the safest cold wallet becomes useless.
❌ Be Cautious of Social Engineering: Any 'customer service' that contacts you should raise a red flag.
In the crypto world, safety comes first. Please protect your private keys!🛡️
#诈骗警示 #安全第一 #比特币 #莱特币 #ZachXBT
🚨 JUST IN – ZACHXBT CASE 🇺🇸🕵️‍♂️ 💥 A hacker exposed their own wallet of $23M during an online fight. 💸 The wallet is linked to over $90M in suspicious funds from the US government. 📌 Grotesque OPSEC error — now the on-chain trail is public. #ZachXBT #Hack #USGov #Security #CryptoNews $BTC {spot}(BTCUSDT) $MMT {spot}(MMTUSDT)
🚨 JUST IN – ZACHXBT CASE 🇺🇸🕵️‍♂️

💥 A hacker exposed their own wallet of $23M during an online fight.
💸 The wallet is linked to over $90M in suspicious funds from the US government.

📌 Grotesque OPSEC error — now the on-chain trail is public.

#ZachXBT #Hack #USGov #Security #CryptoNews
$BTC
$MMT
He Lost $282,000,000 While He Slept. (Are You Next? 🛡️🚨)The Alert: Blockchain sleuth ZachXBT just confirmed a massive $282 Million heist on Jan 10, 2026. A whale lost 1,459 BTC because of a fake support scam. If a whale can fall for it, anyone can. 👇 Binance’s New 2026 Security Arsenal (The Solutions) Binance has just rolled out high tech updates to stop these exact scams. Make sure you are using them: Web3 Wallet Multi Chain Shield: Binance’s 2026 Web3 wallet now uses MPC (Multi Party Computation). Even if one part of your key is exposed, the hacker can’t move your funds. Anti-Phishing 2.0: Check your settings for the "Monitoring Tag." Binance is now tagging high risk tokens and suspicious withdrawal addresses in real time to alert you before you click. The "Three Giants" Oversight: As of Jan 5, 2026, Binance has moved to a multi entity regulated structure. This means Asset Isolation is now 100% your funds are stored separately from the exchange's money, protected by a $1 Billion SAFU fund. Your 30-Second Checklist: Enable Passkeys: Stop using SMS; use Biometrics/FaceID. Whitelist Only: Turn on the "Withdrawal Whitelist" so money only goes to your trusted addresses. Trust No One: Binance Support will NEVER DM you for your seed phrase or password. Quick Vote (Algorithm Booster): Which security feature do you trust most? A: Hardware Wallet + Passphrase 🛡️ B: Binance Web3 Wallet + 2FA 📱 Drop a "SAFU" in the comments if your account is locked down! 👇 #BinanceSquareTips #zachxbt #CryptoSecurity #SAFU2026 #BTC

He Lost $282,000,000 While He Slept. (Are You Next? 🛡️🚨)

The Alert: Blockchain sleuth ZachXBT just confirmed a massive $282 Million heist on Jan 10, 2026. A whale lost 1,459 BTC because of a fake support scam. If a whale can fall for it, anyone can. 👇
Binance’s New 2026 Security Arsenal (The Solutions)
Binance has just rolled out high tech updates to stop these exact scams. Make sure you are using them:
Web3 Wallet Multi Chain Shield: Binance’s 2026 Web3 wallet now uses MPC (Multi Party Computation). Even if one part of your key is exposed, the hacker can’t move your funds.
Anti-Phishing 2.0: Check your settings for the "Monitoring Tag." Binance is now tagging high risk tokens and suspicious withdrawal addresses in real time to alert you before you click.
The "Three Giants" Oversight: As of Jan 5, 2026, Binance has moved to a multi entity regulated structure. This means Asset Isolation is now 100% your funds are stored separately from the exchange's money, protected by a $1 Billion SAFU fund.
Your 30-Second Checklist:
Enable Passkeys: Stop using SMS; use Biometrics/FaceID.
Whitelist Only: Turn on the "Withdrawal Whitelist" so money only goes to your trusted addresses.
Trust No One: Binance Support will NEVER DM you for your seed phrase or password.
Quick Vote (Algorithm Booster):
Which security feature do you trust most?
A: Hardware Wallet + Passphrase 🛡️
B: Binance Web3 Wallet + 2FA 📱
Drop a "SAFU" in the comments if your account is locked down! 👇
#BinanceSquareTips #zachxbt #CryptoSecurity #SAFU2026 #BTC
🔴 TROVE SCAM: INSIDER HOANGTRUNG99 IN THE 11.5M$ TROVE SCAM?💸😃😗😳😔 The Trove project ($TROVE) is not only an international scam but also has clear traces of Vietnamese insiders. 1️⃣ SUMMARY OF POLYMARKET MANIPULATION When the ICO Trove ends, the Trove betting door raising more than 15M$ on Polymarket is considered dead with a win rate of only 0.2%. However, just before the news of the ICO sale extension was announced, two wallets with pure Vietnamese names deposited money into the Poly wallet and bought the YES door: ➤ hoangtrung99: Spent 100$ to buy the YES door (has renamed the profile to onchain-tracking)

🔴 TROVE SCAM: INSIDER HOANGTRUNG99 IN THE 11.5M$ TROVE SCAM?

💸😃😗😳😔
The Trove project ($TROVE) is not only an international scam but also has clear traces of Vietnamese insiders.

1️⃣ SUMMARY OF POLYMARKET MANIPULATION

When the ICO Trove ends, the Trove betting door raising more than 15M$ on Polymarket is considered dead with a win rate of only 0.2%. However, just before the news of the ICO sale extension was announced, two wallets with pure Vietnamese names deposited money into the Poly wallet and bought the YES door:

➤ hoangtrung99: Spent 100$ to buy the YES door (has renamed the profile to onchain-tracking)
Hyperliquid Foundation Donates $254,000 to Blockchain Investigator ZachXBT:-🔥🔥🚀🚀🚀 Brief Review Hyperliquid Foundation donated a large number of tokens to blockchain sleuth ZachXBT to the tune of 10,000 HYPE tokens valued at $254,000. The amount is the second-largest single donation ZachXBT has ever received. Important Points- Details of the Donation:The donation was reported by ZachXBT himself on January 18, 2026, and he updated his public leaderboard for contributors with regard to the donation. - ZachXBT's Work: ZachXBT is famous for his research on crypto crimes and scams, including a recent hit piece he released for stealing $282 million from hardware wallets. - Top Donors: Top donors to the ZachXBT donation addresses include Optimism, Hyperliquid, Octant, The White Whale, Arbitrum, BNB Chain, Unipcs, Nouns, CL207, and Importance of the Donation. The donation is significant because of the increasing institutional support for independent cryptocurrency investigations. The contributions made by ZachXBT have led to millions of dollars being recovered and several scams identified within the cryptocurrency sector. #zachxbt #crypto #liquidity #cryptomarket #hype $HYPE {future}(HYPEUSDT)
Hyperliquid Foundation Donates $254,000 to Blockchain Investigator ZachXBT:-🔥🔥🚀🚀🚀

Brief Review Hyperliquid Foundation donated a large number of tokens to blockchain sleuth ZachXBT to the tune of 10,000 HYPE tokens valued at $254,000. The amount is the second-largest single donation ZachXBT has ever received.
Important Points- Details of the Donation:The donation was reported by ZachXBT himself on January 18, 2026, and he updated his public leaderboard for contributors with regard to the donation.
- ZachXBT's Work: ZachXBT is famous for his research on crypto crimes and scams, including a recent hit piece he released for stealing $282 million from hardware wallets.
- Top Donors: Top donors to the ZachXBT donation addresses include Optimism, Hyperliquid, Octant, The White Whale, Arbitrum, BNB Chain, Unipcs, Nouns, CL207, and Importance of the Donation. The donation is significant because of the increasing institutional support for independent cryptocurrency investigations. The contributions made by ZachXBT have led to millions of dollars being recovered and several scams identified within the cryptocurrency sector.
#zachxbt #crypto #liquidity #cryptomarket #hype
$HYPE
Hyperliquid Foundation transferred 10,000 $HYPE tokens—around $254,000—directly to ZachXBT, one of the most visible on-chain investigators in crypto. No application process mentioned, no press release beforehand. Just a wallet-to-wallet move. What's interesting is the precedent. ZachXBT has exposed scams, rug pulls, and exploit trails for years, mostly self-funded or through community donations. This is one of the first times a Layer 1 foundation has proactively supported that kind of work at this scale. It's not charity—it's arguably infrastructure. The more transparent the chain activity, the harder it is for bad actors to operate unnoticed. Whether this becomes a trend or stays an outlier depends on how other protocols view accountability. For now, it's a data point worth watching. #Hyperliquid #zachxbt #OnChainAnalysis #CryptoSecurity #DeFi
Hyperliquid Foundation transferred 10,000 $HYPE tokens—around $254,000—directly to ZachXBT, one of the most visible on-chain investigators in crypto. No application process mentioned, no press release beforehand. Just a wallet-to-wallet move.

What's interesting is the precedent. ZachXBT has exposed scams, rug pulls, and exploit trails for years, mostly self-funded or through community donations. This is one of the first times a Layer 1 foundation has proactively supported that kind of work at this scale. It's not charity—it's arguably infrastructure. The more transparent the chain activity, the harder it is for bad actors to operate unnoticed.

Whether this becomes a trend or stays an outlier depends on how other protocols view accountability. For now, it's a data point worth watching.

#Hyperliquid #zachxbt #OnChainAnalysis #CryptoSecurity #DeFi
·
--
Bullish
LATE‑BREAKING NEWS — 1:28 AM, New York City 🗽🚨 Monero (XMR) is surging sharply after on‑chain sleuth ZachXBT identified a specific catalyst tied to recent blockchain activity — and the details point to a major real‑world trigger behind the spike 🔍🔥. $BTC {future}(BTCUSDT) According to multiple investigative reports, an attacker carried out a large‑scale social‑engineering exploit on January 10, 2026, stealing more than $282 million in BTC and LTC before rapidly converting the funds into Monero through instant‑swap services. This immediate influx of buy pressure drove a sudden spike in XMR demand, directly lifting its market price. [coinengineer.net] $XRP {future}(XRPUSDT) Further analysis shows the attacker distributed stolen assets across several blockchains — including Ethereum, Ripple, and Litecoin — via THORChain, making the trail more complex and further incentivizing the shift into privacy‑focused XMR. $SOL {future}(SOLUSDT) ZachXBT notes that the rapid multi‑chain conversions produced an abnormal surge in Monero’s transaction volume, amplifying its price rally as liquidity tightened across exchanges. XMR climbed near $800, marking a dramatic multi‑day increase that analysts attribute directly to the attack‑driven purchase pressure rather than standard market cycles. [theblock.co] With on‑chain flows confirming unusual consolidation, high‑value swaps, and multi‑network fund fragmentation, the evidence strongly supports ZachXBT’s conclusion: Monero’s price spike is rooted in a real, traceable theft event rather than speculative market sentiment. This development highlights one of the most striking examples of how private‑asset demand can instantly reshape altcoin momentum 🔥📈🛡️. #️⃣ #MoneroXMR #ZachXBT #OnChainAnalysis #CryptoNews
LATE‑BREAKING NEWS — 1:28 AM, New York City 🗽🚨

Monero (XMR) is surging sharply after on‑chain sleuth ZachXBT identified a specific catalyst tied to recent blockchain activity — and the details point to a major real‑world trigger behind the spike 🔍🔥.
$BTC
According to multiple investigative reports, an attacker carried out a large‑scale social‑engineering exploit on January 10, 2026, stealing more than $282 million in BTC and LTC before rapidly converting the funds into Monero through instant‑swap services. This immediate influx of buy pressure drove a sudden spike in XMR demand, directly lifting its market price. [coinengineer.net]
$XRP
Further analysis shows the attacker distributed stolen assets across several blockchains — including Ethereum, Ripple, and Litecoin — via THORChain, making the trail more complex and further incentivizing the shift into privacy‑focused XMR.
$SOL
ZachXBT notes that the rapid multi‑chain conversions produced an abnormal surge in Monero’s transaction volume, amplifying its price rally as liquidity tightened across exchanges. XMR climbed near $800, marking a dramatic multi‑day increase that analysts attribute directly to the attack‑driven purchase pressure rather than standard market cycles. [theblock.co]

With on‑chain flows confirming unusual consolidation, high‑value swaps, and multi‑network fund fragmentation, the evidence strongly supports ZachXBT’s conclusion: Monero’s price spike is rooted in a real, traceable theft event rather than speculative market sentiment. This development highlights one of the most striking examples of how private‑asset demand can instantly reshape altcoin momentum 🔥📈🛡️.

#️⃣ #MoneroXMR #ZachXBT #OnChainAnalysis #CryptoNews
The $2M Coinbase Scam That Worked Because We Let ItA fraudster posed as Coinbase support and stole $2 million by exploiting wallet approval flows. ZachXBT tracked it all. Here's what that says about crypto UX. On-chain investigator ZachXBT recently unraveled a con that netted over $2 million from crypto traders. The method? Impersonating Coinbase support staff and convincing users to approve wallet transfers. The aftermath? Bottle service and gambling losses. What's interesting here isn't the scam itself—phishing is old. It's how well it worked and how little friction stood in the way. The attacker didn't exploit a smart contract bug or brute-force a private key. They exploited trust and a UI that doesn't stop users from authorizing their own losses. Crypto has spent years building decentralized infrastructure but hasn't solved the human layer. Wallet approval prompts are technical, jargon-heavy, and easy to click through without understanding. For someone already panicked by a "support agent" claiming their account is compromised, those prompts are just obstacles to compliance, not warnings. The education argument only goes so far. You can teach users to verify domains and never share seed phrases, but you can't expect everyone to parse transaction calldata under pressure. That's a design problem, not a user problem. What stood out to me in ZachXBT's thread was the scale. This wasn't one victim—it was systematic. The scammer refined their pitch, identified high-value targets, and repeated the process. That tells you the method works and will keep working until wallet UX changes or platforms enforce stricter verification before support contact. Coinbase didn't get hacked. The users did. But the vulnerability was baked into how we ask people to interact with their own assets. #CryptoScams #coinbase #Web3Security #BlockchainSafety #zachxbt

The $2M Coinbase Scam That Worked Because We Let It

A fraudster posed as Coinbase support and stole $2 million by exploiting wallet approval flows. ZachXBT tracked it all. Here's what that says about crypto UX.

On-chain investigator ZachXBT recently unraveled a con that netted over $2 million from crypto traders. The method? Impersonating Coinbase support staff and convincing users to approve wallet transfers. The aftermath? Bottle service and gambling losses.
What's interesting here isn't the scam itself—phishing is old. It's how well it worked and how little friction stood in the way. The attacker didn't exploit a smart contract bug or brute-force a private key. They exploited trust and a UI that doesn't stop users from authorizing their own losses.
Crypto has spent years building decentralized infrastructure but hasn't solved the human layer. Wallet approval prompts are technical, jargon-heavy, and easy to click through without understanding. For someone already panicked by a "support agent" claiming their account is compromised, those prompts are just obstacles to compliance, not warnings.
The education argument only goes so far. You can teach users to verify domains and never share seed phrases, but you can't expect everyone to parse transaction calldata under pressure. That's a design problem, not a user problem.
What stood out to me in ZachXBT's thread was the scale. This wasn't one victim—it was systematic. The scammer refined their pitch, identified high-value targets, and repeated the process. That tells you the method works and will keep working until wallet UX changes or platforms enforce stricter verification before support contact.
Coinbase didn't get hacked. The users did. But the vulnerability was baked into how we ask people to interact with their own assets.
#CryptoScams #coinbase #Web3Security #BlockchainSafety #zachxbt
$HYPE PUMPS HARD! FOUNDATION DUMPS $254K TO ZACHXBT! Entry: 0.000000000000000000 🟩 Target 1: 0.000000000000000000 🎯 Stop Loss: 0.000000000000000000 🛑 This is INSANE. Hyperliquid Foundation just sent 10,000 $HYPE worth $254K to the legendary $ZACHXBT. This is NOT a drill. They are showing ZERO fear. This is the ultimate transparency play. Expect $PEPE to feel the ripple effect. Big money is moving. Get in or get left behind. This is YOUR chance. Don't miss out. Disclaimer: This is not financial advice. #HYPE #ZACHXBT #CryptoAlpha 🚀 {future}(HYPERUSDT)
$HYPE PUMPS HARD! FOUNDATION DUMPS $254K TO ZACHXBT!
Entry: 0.000000000000000000 🟩
Target 1: 0.000000000000000000 🎯
Stop Loss: 0.000000000000000000 🛑

This is INSANE. Hyperliquid Foundation just sent 10,000 $HYPE worth $254K to the legendary $ZACHXBT. This is NOT a drill. They are showing ZERO fear. This is the ultimate transparency play. Expect $PEPE to feel the ripple effect. Big money is moving. Get in or get left behind. This is YOUR chance. Don't miss out.

Disclaimer: This is not financial advice.

#HYPE #ZACHXBT #CryptoAlpha 🚀
Login to explore more contents
Explore the latest crypto news
⚡️ Be a part of the latests discussions in crypto
💬 Interact with your favorite creators
👍 Enjoy content that interests you
Email / Phone number