Propose an edit: ZachXBT

From memecoin.wiki, the free memecoin encyclopedia

Title Category One sentence summary Infobox, one "key: value" per line Article body, markdown, use [[wiki links]] and end with a ## References section

ZachXBT is a pseudonymous American blockchain investigator who has become the de facto internal affairs department of crypto. According to his Wikipedia biography, he entered the space around 2017, lost money to fraudulent ICO era projects, taught himself blockchain analysis, and began publishing investigative threads on X in 2021. His investigations are usually free and crowdfunded by donations, and in February 2025 he joined the venture firm Paradigm as an incident response advisor. Court filings from 2023 cited in later reporting identify him as Zachary Wolk, though he continues to operate under the pseudonym.

## Investigations

His casework spans the entire crypto crime landscape. An early investigation into a Bored Ape Yacht Club phishing ring that stole 2.5 million dollars in NFTs led to arrests and convictions in France. In August 2024 he noticed an unusually large Bitcoin movement and unraveled the theft of about 243 million dollars from a Genesis creditor, tracing 4,064 BTC across more than fifteen exchanges; the work contributed to the arrests of Malone Lam and Jeandiel Serrano in September 2024, Veer Chetal in March 2025, and Danish Zulfiqar in December 2025. Within hours of the February 21, 2025 Bybit hack he submitted evidence attributing the 1.5 billion dollar theft to North Korea's Lazarus Group, an attribution later confirmed by the FBI. In January 2026 he investigated the theft of 46 million dollars in crypto seized by the US Marshals Service, identifying the alleged thief as John Daghita, alias "Lick," who was arrested that March. He has also quantified that Coinbase users were losing roughly 300 million dollars a year to social engineering scams.

His 2026 casework continued at the same pace. On August 10, 2026 he linked US resident Tiffany Milanovich to at least 5 million dollars in exchange support impersonation thefts, an allegation from his own investigation. He tied a teenager, Dritan Kapllani Jr, to about 19 million dollars in social engineering thefts, and reported that 95 percent of the Bitget promoted LAB token supply was insider controlled, calling it a multi front retail rug, again per his own findings.

## The trenches beat

For [[the trenches]], ZachXBT matters most as the standing audit of [[KOL]] culture. He has documented paid promotions and pump and dump patterns around celebrity tokens, including the wave of hijacked and rented celebrity accounts associated with [[Sahil Arora]] in 2024, and his investigation tied the May 2024 hack of [[GCR]]'s X account to the team behind a [[Solana]] memecoin. When a launch like the [[LIBRA scandal]] or a suspicious [[insider]] pattern hits, "wait for Zach" is a stock response on [[Crypto Twitter]]. CoinDesk named him among its Most Influential figures of 2025.

His most trench relevant case broke on February 26, 2026, when he alleged that employees of [[axiom|Axiom]], the dominant trench trading terminal, a Y Combinator W25 company reporting over 390 million dollars in revenue, had abused internal support tools to access users' private wallet data. He named a senior business development employee, "Broox," who in recordings ZachXBT cited described tracking any user by referral code, wallet, or user id, researching wallets slowly "so it does not look that suspicious," compiling the private wallets of [[KOL]]s, and helping a colleague profit 200,000 dollars from the access. Axiom said it was "surprised and disappointed," cut internal tool access, and pledged accountability.

## Controversies

His stature has drawn scrutiny of his own finances. In early 2025 he withdrew roughly 3.9 million dollars from the liquidity pool of an unsolicited tribute memecoin created in his name, which critics called hypocritical given his coverage of memecoin extraction; he responded that the token was unsolicited and disclosed other income including community funding and payments from protocols, per KuCoin and Datawallet summaries. Separately, subjects of his investigations have periodically accused him of inaccuracy or selective targeting, though his major case outcomes have repeatedly been validated by law enforcement.

## References

- Wikipedia, ZachXBT: https://en.wikipedia.org/wiki/ZachXBT
- CoinDesk: https://www.coindesk.com/tech/2025/12/15/most-influential-zachxbt
- datawallet.com: https://www.datawallet.com/crypto/who-is-zachxbt
- KuCoin: https://www.kucoin.com/news/flash/allegations-emerge-about-identity-and-financial-ties-of-crypto-investigator-zachxbt
- Cryptonews: https://cryptonews.com/news/investigation-links-memecoin-team-to-hack-of-crypto-influencers-account-zachxbt/
- nftplazas.com: https://nftplazas.com/zachxbt-guide/
- X profile of @zachxbt: https://x.com/zachxbt
- The Block: https://www.theblock.co/news/ecosystems/2026-02-26-zachxbt-investigation-into-alleged-employee-insider-trading-391423
- CCN: https://www.ccn.com/analysis/crypto/axiom-employees-exposed-insider-trading-scandal-zachxbt/
- The Crypto Times: https://www.cryptotimes.io/2026/08/10/zachxbt-links-u-s-resident-to-alleged-5m-in-crypto-support-impersonation-thefts/
- tekedia.com: https://www.tekedia.com/zachxbt-tracks-us-based-scammer-linked-to-millions-in-crypto-theft/
- CCN: https://www.ccn.com/news/crypto/zachxbt-band-4-band-flex-crypto-theft-dritan-kapllani-jr-19m/
- news.bitcoin.com: https://news.bitcoin.com/zachxbt-lab-token-insider-control-bitget-investigation-2026/

Your handle or name (optional) Note to the moderators (optional)

A moderator reviews every submission before it publishes.