ZachXBT pfp

ZachXBT

@zachxbt

108 Following
68423 Followers


ZachXBT pfp
ZachXBT
@zachxbt
A number of large accounts on X currently have their account compromised and all are promoting the same meme coin scam. https://x.com/zachxbt/status/1836473279479189916
10 replies
19 recasts
70 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Cencora, a top 50 publicly traded company in the US made a $75M ransomware payment earlier this year but did not share the BTC transactions so I decided to do it for them. https://x.com/zachxbt/status/1836403999030788570
10 replies
22 recasts
89 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Happy to have played a part in freezing $7M as a direct result of my Lazarus Group investigation. https://x.com/zachxbt/status/1834881201326178808?
22 replies
128 recasts
337 reactions

ZachXBT pfp
ZachXBT
@zachxbt
A threat actor hacked the McDonald’s Instagram account and began promoting a meme coin scam.
21 replies
10 recasts
79 reactions

ZachXBT pfp
ZachXBT
@zachxbt
A few hours ago a victim was drained for 55.4M DAI Transaction hash 0xf70042bf3ae7c22f0680f8afa078c38989ed475dfbe5c8d8f30a50d4d2f45dc4 Theft address 0x5D4b2A02c59197eB2cAe95A6Df9fE27af60459d4
20 replies
31 recasts
182 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Seven hours ago a suspicious transfer was made from a potential victim for 4064 BTC ($238M) Transaction hash 4b277ba298830ea538086114803b9487558bb093b5083e383e94db687fbe9090 Funds were quickly transferred to ThorChain, eXch, Kucoin, ChangeNow, Railgun, Avalanche Bridge.
54 replies
134 recasts
474 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Nexera (NXRA) was exploited for ~$1.5M a few hours ago. Attacker is connected on-chain to other recent private key compromise incidents such as SpaceCatch, Concentric Finance, OKX DEX, Serenity Shield, Reach, and many more. Stolen funds sit 0xe697949817a45446776376db203c04d31b580a10 0x6bd33c8256f7a37336b2b8fe967321e25540337b
11 replies
10 recasts
97 reactions

ZachXBT pfp
ZachXBT
@zachxbt
On-chain clown of the day: The Pancake Bunny exploiter accidentally transferred $3.6M to the DAI contract address 8 hrs ago 0x72df3d8b97b92188eb7516277836fd07e994b276c858052815a398cc52c91bc1
33 replies
31 recasts
193 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Sorta Finance was created by the same group of scammers who deploy Compound V2 forks on different EVM chains. Posted on Warpcast about three other scams they did earlier this year https://x.com/zachxbt/status/1816443881447440789
23 replies
25 recasts
103 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Someone was phished for $4.69M worth of PT-ezETH & PT-sz-rsETH an hour ago Theft transaction hash 0x7357787481b25c99b61912af8159f866d4ff2e7d97039425b529e2890b23c4f6 0x26820ddb9aeb9a74ac757be5e182c83ec20443d2273bbd68d1d1fa86f2b131a0 More than $23.2M has been phished from Pendle users since March 2024
28 replies
14 recasts
109 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Looks like the Indian crypto exchange WazirX was potentially hacked for $230M+ Primary theft address 0x04b21735E93Fa3f8df70e2Da89e6922616891a88 Attacker still has $100M+ worth of SHIB and $4.7M+ FLOKI to sell
40 replies
33 recasts
135 reactions

ZachXBT pfp
ZachXBT
@zachxbt
I have been closely following the movements of the $305M DMM Bitcoin hack. Shared some details of where those funds are going and the related 29M USDT blacklist over the weekend. https://x.com/zachxbt/status/1812466959109521649?
29 replies
19 recasts
125 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Sharing the $25M ransom payment made by CDK on June 21, 2024 to BlackSuit. Transaction hash 8a41d7a6b75580f34f177628c39bd52ae9c8adc633fb5c874b3a09b253f3d4ef Address bc1q0c03s0c80uuxjq4jcyfhs4k8w5wu6ca9xhxsw9 Funds were transferred to a variety of centralized services after.
12 replies
9 recasts
73 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Community Alert: Compound Finance website seems to potentially be hijacked do not visit the site for the time being. Currently redirects to a newly registered phishing site.
24 replies
36 recasts
182 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Now we even have Messi promoting meme coin pump and dumps on Instagram. https://x.com/wazzcrypto/status/1804194766453719094
41 replies
26 recasts
155 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Update: Bittensor was halted as the result of additional thefts earlier today likely due to private key leakage
20 replies
17 recasts
84 reactions

ZachXBT pfp
ZachXBT
@zachxbt
US government just transferred 3940 BTC ($243M) of funds from the Silk Road hack to Coinbase Prime Transaction hash 0f3f9a7c01d85c5747a3ae6cc9621cc30360390c4b681c1f95573e6bbcffed4f Coinbase Prime Deposit address 3FGcXf5HiPkitjQp4xjGu7Gte6aK7w43su https://blockchair.com/bitcoin/transaction/0f3f9a7c01d85c5747a3ae6cc9621cc30360390c4b681c1f95573e6bbcffed4f
32 replies
18 recasts
140 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Recently helped identity and contact the main NFTPerp exploiter after they were attacked for $775K on Blast the other week. https://x.com/nftperp/status/1801690415323652409
25 replies
13 recasts
97 reactions

ZachXBT pfp
ZachXBT
@zachxbt
Robert Robb aka Poker Brat plead guilty on Friday just a few months after my post from December 2023 detailing his MEV bot investment fraud scheme. https://x.com/zachxbt/status/1731745308449575015
17 replies
5 recasts
133 reactions

ZachXBT pfp
ZachXBT
@zachxbt
BTC Turk ($90M+) and Sportsbet ($3.5M+) were both hacked earlier today on multiple chains likely by the same threat actor due to commingling of funds. Funds were quickly transferred to Coinbase, Binance, Gate, MEXC, Bybit, Gate, ChangeNow, FixedFloat and withdrawn to Bitcoin and Funds were bridged via THORChain/Wan Bridge to Bitcoin Theft address 0x327a81d0d128db8886d265be73c9fdda97194f30 r4tvMzLrhWGCZ6W9yZRhWguEhovxsHSTRB TJZwDMSp9PsjvaCn7SKHCbkFEX8jgEY6XC TTKhC17M3xdXtrKDU5niLg4YH2rK742D8D TDgZKxhyFQWCsNK1p7d1tVifeuW2DJTUEo TQWSmSqns2BLczLEMpy96tNq3MagM66H4b TJZ8NNxJETGDzGaWwSHwjGrzzz2Zhvexo2
19 replies
17 recasts
142 reactions