ZachXBT

@zachxbt

108 Following

68423 Followers

ZachXBT pfp

A number of large accounts on X currently have their account compromised and all are promoting the same meme coin scam. https://x.com/zachxbt/status/1836473279479189916

10 replies

19 recasts

70 reactions

ZachXBT pfp

Cencora, a top 50 publicly traded company in the US made a $75M ransomware payment earlier this year but did not share the BTC transactions so I decided to do it for them. https://x.com/zachxbt/status/1836403999030788570

10 replies

22 recasts

89 reactions

ZachXBT pfp

Happy to have played a part in freezing $7M as a direct result of my Lazarus Group investigation. https://x.com/zachxbt/status/1834881201326178808?

22 replies

128 recasts

337 reactions

ZachXBT pfp

A threat actor hacked the McDonald’s Instagram account and began promoting a meme coin scam.

21 replies

10 recasts

79 reactions

ZachXBT pfp

A few hours ago a victim was drained for 55.4M DAI Transaction hash 0xf70042bf3ae7c22f0680f8afa078c38989ed475dfbe5c8d8f30a50d4d2f45dc4 Theft address 0x5D4b2A02c59197eB2cAe95A6Df9fE27af60459d4

20 replies

31 recasts

182 reactions

ZachXBT pfp

Seven hours ago a suspicious transfer was made from a potential victim for 4064 BTC ($238M) Transaction hash 4b277ba298830ea538086114803b9487558bb093b5083e383e94db687fbe9090 Funds were quickly transferred to ThorChain, eXch, Kucoin, ChangeNow, Railgun, Avalanche Bridge.

54 replies

134 recasts

474 reactions

ZachXBT pfp

Nexera (NXRA) was exploited for ~$1.5M a few hours ago. Attacker is connected on-chain to other recent private key compromise incidents such as SpaceCatch, Concentric Finance, OKX DEX, Serenity Shield, Reach, and many more. Stolen funds sit 0xe697949817a45446776376db203c04d31b580a10 0x6bd33c8256f7a37336b2b8fe967321e25540337b

11 replies

10 recasts

97 reactions

ZachXBT pfp

On-chain clown of the day: The Pancake Bunny exploiter accidentally transferred $3.6M to the DAI contract address 8 hrs ago 0x72df3d8b97b92188eb7516277836fd07e994b276c858052815a398cc52c91bc1

33 replies

31 recasts

193 reactions

ZachXBT pfp

Sorta Finance was created by the same group of scammers who deploy Compound V2 forks on different EVM chains. Posted on Warpcast about three other scams they did earlier this year https://x.com/zachxbt/status/1816443881447440789

23 replies

25 recasts

103 reactions

ZachXBT pfp

Someone was phished for $4.69M worth of PT-ezETH & PT-sz-rsETH an hour ago Theft transaction hash 0x7357787481b25c99b61912af8159f866d4ff2e7d97039425b529e2890b23c4f6 0x26820ddb9aeb9a74ac757be5e182c83ec20443d2273bbd68d1d1fa86f2b131a0 More than $23.2M has been phished from Pendle users since March 2024

28 replies

14 recasts

109 reactions

ZachXBT pfp

Looks like the Indian crypto exchange WazirX was potentially hacked for $230M+ Primary theft address 0x04b21735E93Fa3f8df70e2Da89e6922616891a88 Attacker still has $100M+ worth of SHIB and $4.7M+ FLOKI to sell

40 replies

33 recasts

135 reactions

ZachXBT pfp

I have been closely following the movements of the $305M DMM Bitcoin hack. Shared some details of where those funds are going and the related 29M USDT blacklist over the weekend. https://x.com/zachxbt/status/1812466959109521649?

29 replies

19 recasts

125 reactions

ZachXBT pfp

Sharing the $25M ransom payment made by CDK on June 21, 2024 to BlackSuit. Transaction hash 8a41d7a6b75580f34f177628c39bd52ae9c8adc633fb5c874b3a09b253f3d4ef Address bc1q0c03s0c80uuxjq4jcyfhs4k8w5wu6ca9xhxsw9 Funds were transferred to a variety of centralized services after.

12 replies

9 recasts

73 reactions

ZachXBT pfp

Community Alert: Compound Finance website seems to potentially be hijacked do not visit the site for the time being. Currently redirects to a newly registered phishing site.

24 replies

36 recasts

182 reactions

ZachXBT pfp

Now we even have Messi promoting meme coin pump and dumps on Instagram. https://x.com/wazzcrypto/status/1804194766453719094

41 replies

26 recasts

155 reactions

ZachXBT pfp

Update: Bittensor was halted as the result of additional thefts earlier today likely due to private key leakage

20 replies

17 recasts

84 reactions

ZachXBT pfp

US government just transferred 3940 BTC ($243M) of funds from the Silk Road hack to Coinbase Prime Transaction hash 0f3f9a7c01d85c5747a3ae6cc9621cc30360390c4b681c1f95573e6bbcffed4f Coinbase Prime Deposit address 3FGcXf5HiPkitjQp4xjGu7Gte6aK7w43su https://blockchair.com/bitcoin/transaction/0f3f9a7c01d85c5747a3ae6cc9621cc30360390c4b681c1f95573e6bbcffed4f

32 replies

18 recasts

140 reactions

ZachXBT pfp

Recently helped identity and contact the main NFTPerp exploiter after they were attacked for $775K on Blast the other week. https://x.com/nftperp/status/1801690415323652409

25 replies

13 recasts

97 reactions

ZachXBT pfp

Robert Robb aka Poker Brat plead guilty on Friday just a few months after my post from December 2023 detailing his MEV bot investment fraud scheme. https://x.com/zachxbt/status/1731745308449575015

17 replies

5 recasts

133 reactions

ZachXBT pfp

BTC Turk ($90M+) and Sportsbet ($3.5M+) were both hacked earlier today on multiple chains likely by the same threat actor due to commingling of funds. Funds were quickly transferred to Coinbase, Binance, Gate, MEXC, Bybit, Gate, ChangeNow, FixedFloat and withdrawn to Bitcoin and Funds were bridged via THORChain/Wan Bridge to Bitcoin Theft address 0x327a81d0d128db8886d265be73c9fdda97194f30 r4tvMzLrhWGCZ6W9yZRhWguEhovxsHSTRB TJZwDMSp9PsjvaCn7SKHCbkFEX8jgEY6XC TTKhC17M3xdXtrKDU5niLg4YH2rK742D8D TDgZKxhyFQWCsNK1p7d1tVifeuW2DJTUEo TQWSmSqns2BLczLEMpy96tNq3MagM66H4b TJZ8NNxJETGDzGaWwSHwjGrzzz2Zhvexo2

19 replies

17 recasts

142 reactions