Investigations by ZachXBT

Public

View Channel

18.5K

267

2.3M

Can't Join? @investigations

98.8k Members

Updated: May 27, 2026 at 6:25 PM

Investigations by ZachXBT

Reports, news, & insights shared by ZachXBT My public addresses: zachxbt.eth 0x9D727911B54C455B0071A7B682FcF4Bc444B5596 investigations.sol

@investigations is a growing community focused on zachxbt and zachxbteth and related topics

Ranking

Global Ranking

#456

Language Ranking

#45

Category Ranking

#23

-1

Participant Growth (Last 10 Days)

Total: 98.8K

24h growth: +1.7K 2%

Latest Posts

Investigations by ZachXBT

May 13, 2026, 10:57 PM

📷 Photo

It appears the Iranian exchange Wallex[.]ir had one of its wallet addresses frozen by both Circle & Tether.

0x6926408f55c4f322ebe1a3cc7e4fff380c5543df

A few hours ago Wallex began consolidating crypto assets from different hot wallets on Tron and Ethereum to BSC via multiple bridges.

$2.49M currently sits dormant at 0xf945c7566f4204ad286a0c3ff1d8a72183e6ccdd

81,100

553

Investigations by ZachXBT

May 13, 2026, 10:57 PM

📷 Photo

A special thanks to http://hyperliquid.xyz/ for their recent generous donation.

Here's the updated all time leaderboard for my top 10 largest donors by amount:

1). https://x.com/optimism
2). https://x.com/hyperliquidx
3). https://x.com/octantapp
4). https://x.com/thewhitewhalev25). https://x.com/arbitrum
6). https://x.com/bnbchain
7). https://x.com/theunipcs
8). https://x.com/nounsdao
9). https://x.com/cl207
10). https://x.com/highstakescap

Investigations by ZachXBT

May 13, 2026, 10:57 PM

BREAKING: Circle froze the USDC balance of 16 hot wallets for various businesses late yesterday.

I spoke with one of the affected businesses directly and they stated it was due to an ongoing US civil case whose details are not yet disclosed.

I reviewed the onchain activity and the exchanges, casinos, forex businesses do not appear to be related at all to each other.

Why was the request not properly reviewed by Circle?

For those unfamiliar a crypto business has a hot wallet to process the bulk of transactions for its users.

An analyst with basic tools could have identified within minutes that these were operational business wallets from the thousands of transactions they process.

Now their business operations have been negatively impacted by Circle, Lawyer, Forensics firm, & Judge

Rain[.]gg
0x87d18ee84e8f4f5709cbf3500179a4c601da12ce
Clash[.]gg
0x9e2a58d257963a276452fff1be94c0eb7e2775cc
Whale[.]io
0x4bd282c083d9ec35aa6c3e0f366d79f12f3a1630
Goated[.]com
0x61f08d119974a3d9915f06765d83fe1aa677e543
500 Casino
0x68416debc20d13e5ef694cdcac9506f4c1a20184
Finrax
0x258494a21d9ea90fcbcb9e22bd57c6899de0d995
Herofx
0x2704ba2d5d3544e6292d9aca536b6bbbfebd80e9
Coinsbuy
0x5f9acf4e85aa7283e0c16dd94cbc942f9d625151
0x22face80f43b857141e9752c3bae8c3309fcdd0f
Unknown service hot wallets
0xfb3a175ce3cb33d9f464a3c5ea0b834dae2aaaf6
0xb25ea1d493b49a1ded42ac5b1208cc618f9a9b80
0x090aac31fca0d19f91e30e02ec8217098a3a4446
0xbfca3e2097baa1eb354e9d915180707dde1027f2
0x3b848ac300b9e0d260e812b628b87a03d278db95
0x00e84a0b678cd4584a9a377d334c810025970873
0xf9e83020cccbd1a95f0f257a5a9e3d58149762f8

63,800

Investigations by ZachXBT

May 13, 2026, 10:57 PM

📷 Photo

Earlier today Serpent (Ethos Network founder) publicly shared a dataset of 70K InfoFi users from Kaito, Wallchain, Cookie, Galxe, Xeet, & Ethos. I worked with Shob to compare the InfoFi users to their X account location and here were the results:

97,900

1,587

Investigations by ZachXBT

May 13, 2026, 10:57 PM

On January 10, 2026 at around 11 pm UTC a victim lost $282M+ worth of LTC & BTC due to a hardware wallet social engineering scam.

The attacker began converting the stolen LTC & BTC to Monero via multiple instant exchanges causing the XMR price to sharply increase.

BTC was also bridged to Ethereum, Ripple, & Litecoin via Thorchain.

Theft addresses (2.05M LTC, 1459 BTC):
bc1qluxw46r55wf3dnk9c652vrt4duadm3hpuktf86
bc1qpsmh26ja0fzzf286zulmt9eywujc2pggj40wzm
ltc1qly43c2prj4c2e85dcspzpjd36jnapnenldnr70

121,000

1,627

Investigations by ZachXBT

May 13, 2026, 10:57 PM

📷 Photo

It appears hundreds of wallets are currently being drained on various EVM chains for small amounts (<$2k total per victim) with a root cause not yet unidentified.

So far ~$107K has been drained from them with the theft total still increasing.

Suspicious address
https://debank.com/profile/0xAc2e5153170278e24667a580baEa056ad8Bf9bFB

101,000

847

Investigations by ZachXBT

May 13, 2026, 10:57 PM

📷 Photo

Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & contact information).

Earlier today customers received the email below.

100,000

1,091

Investigations by ZachXBT

May 13, 2026, 10:57 PM

📷 Photo

If you are a GLM holder please consider https://octant.app/project/10/0xE74bbe83747ad12F24ecc5E9e4fAF7CFd7D487A2 to me for Octant Epoch 10.

Voting will be open until January 20, 2025.

89,200

783

Investigations by ZachXBT

May 13, 2026, 10:57 PM

Community alert: A number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple of hours.

While the exact root cause has not been determined coincidentally the Trust Wallet Chrome extension pushed a new update yesterday.

Send me a https://x.com/zachxbt if you were affected and I will update the list of theft addresses below as I verify more.

Theft addresses

EVM
0x3b09A3c9aDD7D0262e6E9724D7e823Cd767a0c74
0x463452C356322D463B84891eBDa33DAED274cB40
0xa42297ff42a3b65091967945131cd1db962afae4
0xe072358070506a4DDA5521B19260011A490a5aaA
0xe072358070506a4DDA5521B19260011A490a5aaA
0xc22b8126ca21616424a22bf012fd1b7cf48f02b1
0x463452c356322d463b84891ebda33daed274cb40
0x109252d00b2fa8c79a74caa96d9194eef6c99581
0x30cfa51ffb82727515708ce7dd8c69d121648445
0x4735fbecf1db342282ad5baef585ee301b1bce25
0xf2dd8eb79625109e2dd87c4243708e1485a85655
Bitcoin
bc1qjj7mj50s2e38m4nn7pt2j0ffddxmuxh2g8tyd8
bc1ql9r9a4uxmsdwkenjwx7t5clslsf62gxt8ru7e8
bc1q4g8u7kctk6f2x3f6nh43x76qm4fd0xyv3jugdy
bc1qw7s35umfzgcc7nmjdj9wsyuy9z3g6kqjr0vc7w
bc1qgccgl9d0wzxxnvklj4j55wqeqczgkn6qfcgjdg
bc1q3ykewj0xu0wrwxd2dy4g47yp75gxxm565kaw6m
Solana
HoQ6z1wW3LUnEGHnseC3ND3PoC6i6RghMCphHhK42FEH

174,000

Investigations by ZachXBT

May 13, 2026, 10:57 PM

Community alert: A number of Trust Wallet users have reported that funds were drained from wallet addresses within the past couple of hours. While the exact root cause has not been determined coincidentally the Trust Wallet Chrome extension pushed a new update…

120,000

929

Investigations by ZachXBT

Apr 3, 2026, 06:06 PM

📷 Photo

A victim had suspicious outflows of ~$1.1M from five wallets on EVM chains 23 hours ago in a private key compromise.

The attacker swapped out of all assets for ETH immediately and deposited 330 ETH to Tornado.

Theft address
https://blockscan.com/address/0x4f8affe6cd269d1f8352d0542432de6975c3912d

81,500

571

Investigations by ZachXBT

Apr 3, 2026, 06:06 PM

$5K bounty to the first person who can successfully scrape all Kaito Yaps, Wallchain, Galxe, Layer 3, Cookie, Xeet users. Please capture any data available (X username, user id, onchain address, score/points, etc). Send me a DM on X once completed.

71,600

649

Investigations by ZachXBT

Apr 3, 2026, 06:06 PM

Earlier today Serpent (Ethos Network founder) https://x.com/serpinxbt/status/1998663899856404619? a dataset of 70K InfoFi users from Kaito, Wallchain, Cookie, Galxe, Xeet, & Ethos.

I worked with https://x.com/shob10_ to compare the InfoFi users to their X account location and here were the results:

View on X (Twitter)

86,000

Investigations by ZachXBT

Apr 3, 2026, 06:06 PM

$5K bounty to the first person who can successfully scrape all Kaito Yaps, Wallchain, Galxe, Layer 3, Cookie, Xeet users.

Please capture any data available (X username, user id, onchain address, score/points, etc).

Send me a DM on X once completed.

80,600

3,302

Investigations by ZachXBT

Apr 3, 2026, 06:06 PM

📷 Photo

The project 'GANA Payment' was exploited a few hours ago for ~$3.1M+ on BSC

Theft consolidation
https://bscscan.com/address/0x2e8a8670b734e260cedbc6d5a05532264aae5c38

The attacker deposited 1140 BNB ($1.04M) to Tornado on BSC and bridged funds to Ethereum where another 346.8 ETH ($1.05M) was deposited to Tornado.

346 ETH ($1.046M) currently sits dormant on Ethereum at https://etherscan.io/address/0x7a503e3ab9433ebf13afb4f7f1793c25733b3cca

156,000

34,126

Investigations by ZachXBT

Apr 3, 2026, 06:06 PM

My new post sharing an investigation on a $243M theft from last month which lead to multiple arrests and $9M+ frozen https://x.com/zachxbt/status/1836752923830702392?

View on X (Twitter)

95,800

1,363

Investigations by ZachXBT

Apr 3, 2026, 06:06 PM

📷 Photo

Onchain clown of the month: A Cardano holder swapped 14.4M ADA ($6.9M) for 847K USDA (Cardano stable pegged to USD) two hours ago and lost $6.05M due to low liquidity causing the price to sharply spike temporarily. Previously the funds sat dormant for ~5 years

Address
https://blockchair.com/cardano/address/addr1qy5lcrk497pg88xkfgwxp2v9y328g3j87tvq3sefpkmg7n7nst5js3fzwl4cm8g46fm6unayaet8yfcw5kp3jkjy0tdsr4x534

100,000

1,774

Investigations by ZachXBT

Mar 31, 2026, 03:43 PM

📷 Photo

Community Alert: Be careful of a fake Hyperliquid app on the Google Play Store.

None of these platforms seem to do a good job of filtering these scams out.

Theft address
https://blockscan.com/address/0x8c12C21C394D9174c3b1a086A97d2C5523ABb8F5

123,000

911

Investigations by ZachXBT

Mar 31, 2026, 03:43 PM

Ranking the bottom 5 jurisdictions for crypto related victims from my own experience:

🥇 Nigeria
🥈India
🥉Canada
4). UK
5). Russia

(If you contact me from them I will likely have to decline formally assisting due to stagnant legal cases)

91,600

1,343

Showing 19 of 19 posts

No more posts

Loading posts...

Rating

User Reviews (0)

No reviews yet. Be the first to share your experience!

Loading reviews...

Related Telegram Channels

Anders Behring Breivik death sentence NOW - a person who killed at least 78 people in Norway living better than homeless

610

Intel Republic

107k0

Loading recommended channels...

Investigations by ZachXBT

Investigations by ZachXBT

Ranking

Participant Growth (Last 10 Days)

Latest Posts

Rating

User Reviews (0)

Related Telegram Channels

War Monitor

Our News, Today

𝕂𝕟𝕠𝕨𝕝𝕖𝕕𝕘𝕖 𝕒𝕟𝕕 𝔽𝕒𝕔𝕥𝕤

Calendar Signals

Newsmakers

Boinkers News

Anders Behring Breivik death sentence NOW - a person who killed at least 78 people in Norway living better than homeless

Intel Republic

Related Telegram Channels

War Monitor

Our News, Today

𝕂𝕟𝕠𝕨𝕝𝕖𝕕𝕘𝕖 𝕒𝕟𝕕 𝔽𝕒𝕔𝕥𝕤

Calendar Signals

Newsmakers

Boinkers News

Anders Behring Breivik death sentence NOW - a person who killed at least 78 people in Norway living better than homeless

Intel Republic

User Reviews (0)

Latest Posts