15 Jun 2025

ZachXBT: The Anonymous Analyst Tracing Billions in Crypto Fraud

ZachXBT’s investigations, and his story - The Coinomist

As ZachXBT boarded his flight, he witnessed one of the largest crypto heists in history—an astonishing $243 million disappearing into the depths of the blockchain.

On this page

The airport was crowded, but ZachXBT’s mind was elsewhere. His phone suddenly buzzed with a new alert—a Bitcoin transaction of over $600,000 had just been sent to a small exchange. At first glance, it seemed like just another large transfer.

However, another notification appeared. $1 million. Then $2 million.

Minutes before takeoff, ZachXBT frantically pieced together the clues, tracking crypto addresses in real time. He realized that these funds had been untouched since 2012.

This wasn’t just another trade. Someone had just drained a Bitcoin wallet that had been dormant for a decade.

But who was behind it? And how did they pull it off?

By the time his plane landed, ZachXBT had unraveled the entire scheme and issued an urgent warning to his 650,000 followers.

This marked the beginning of an intense digital manhunt that quickly led him to two young cybercriminals living in luxury, spending millions on private jets, high-end watches, and supercars, completely unaware that every move they made was already being tracked.

The Man Behind the Mask: Who is ZachXBT?

Many have asked this question, but the answer remains unknown.

To most, he is an anonymous digital detective, a lone guardian of the blockchain hunting down criminals.

To law enforcement, he is an invaluable ally, helping trace billions billions in stolen assets.

And to scammers, he is a relentless nightmare that never fades.

Unlike government agencies that take months to investigate, ZachXBT works in real time.

His investigations have resulted in the arrests of crypto criminals, the exposure of corrupt influencers, and the recovery of stolen funds.

Despite his impact, ZachXBT remains anonymous, faceless, and unpaid for his work.

But that doesn't stop him.

ZachXBT: an anonymous digital detective - The Coinomist
ZachXBT: an anonymous digital detective. Source: Х

The Hunt for Thieves Who Stole $243 Million in Bitcoin

As soon as ZachXBT published his findings on the massive crypto heist, anonymous tips flooded his inbox.

One included a video of the hackers celebrating their crime, a reckless display of arrogance and overconfidence.

Oh my god! Oh my god! 243 million dollars! Yes! Do you know how much money that is?

one of them shouted into the camera.

However, they had no idea their digital fingerprints were everywhere.

A few weeks later, ZachXBT identified them as Malone Lam and Jeandiel Serrano, both in their early twenties, recklessly spending their stolen millions if there were no tomorrow.

Lam settled in Miami, renting a waterfront mansion for $68,000 a month.
Serrano was arrested at Los Angeles Airport while returning from a luxury vacation in the Maldives. 

On his wrist was a watch worth half a million dollars.

When ZachXBT saw their photos in the police database, he didn't feel joy.

There was no celebration. No sense of triumph.

Just quiet satisfaction that, this time, the criminals didn't escape justice.

Press report on the detention of Jeandiel Serrano - The Coinomist
Press report on the detention of Jeandiel Serrano. Source: News Miami

Exposing North Korea’s Crypto Empire

While some criminals are motivated by greed, others serve far more sinister agendas.

Through years of investigations, ZachXBT uncovered a vast network of stolen funds tied to North Korean hackers. However, these cybercriminals were not stealing for personal wealth but to finance covert state operations.

His research revealed how hackers infiltrated crypto exchanges, draining funds before victims even realized they had been targeted.

North Korean hackers infiltrate GitHub and npm packages. Is this a new threat to developers? Explore the details of the attack in our report!

As ZachXBT tracked the stolen assets, he saw criminals laundering the funds through covert networks that erased any trace of their origins.

However, the deeper he investigated, the clearer the picture became. This was not just another cybercrime but a state-sponsored operation fueling Pyongyang’s growing financial needs. Moreover, it was designed to evade sanctions and support the regime’s ambitions.

His investigations did more than just reveal North Korea’s involvement in crypto thefts. They also helped authorities freeze millions in stolen funds before they could disappear entirely.

For the first time, law enforcement had the undeniable proof they desperately needed.

People think of crypto scams as individual crimes. But what if I told you some of them are financing entire governments?

ZachXBT once remarked.
Pyongyang uses cryptocurrency stolen by hackers to fund its military programs - The Coinomist
Pyongyang uses cryptocurrency stolen by hackers to fund its military programs. Source: Х

The Battle Against the Powerful: The MachiBigBrother Lawsuit

Despite his achievements, not everyone is happy about ZachXBT exposing their dealings.

In 2022, he published an investigative report on Jeffrey Huang, a famous NFT trader known as MachiBigBrother. ZachXBT accused Huang of embezzling 22,000 ETH (~$40 million) from Formosa Financial.

Huang decided to fight back, not with facts but with a lawsuit.

He sued ZachXBT for defamation, hoping to drown the accusations in overwhelming legal costs.

The biggest crypto hacks of 2024. Check out a quarterly breakdown of key incidents and their impact on the market in our news report!

However, he did not anticipate the crypto community standing firmly in support of its anonymous investigator.

Within days, Binance, Coinbase, Uniswap, and thousands of users rallied behind ZachXBT. His supporters raised more than $1 million to fund his legal battle and defend his right to expose corruption.

In the end, Huang dropped the lawsuit, but the message was clear.

Even billionaires cannot silence the most relentless crypto investigator.

Famous NFT trader Jeffrey Huang aka MachiBigBrother - The Coinomist
Famous NFT trader Jeffrey Huang aka MachiBigBrother. Source: iq.wiki

The Moral Dilemma of a Selfless Justice Seeker

Despite all his achievements, from recovering billions to leading to arrests and returning stolen funds, ZachXBT has never earned a salary.

All his investigations are funded solely through donations.

His commitment is so strong that even after helping the U.S. government recover $20 million in stolen cryptocurrency, he did not receive a single cent.

I see money seized, people arrested, funds returned to victims. That’s my goal. That’s what I set out to do,

he once said.

But how long can one person keep doing this alone? The demand for his work grows every day. More scams. Bigger hacks. More people seeking justice.

For now, ZachXBT keeps going.

Watching. Tracking. Hunting.

But in a world where criminals grow wealthier while those fighting them remain anonymous, one question remains:

Who will protect the protector?

Detective ZachXBT's signature profile picture - The Coinomist
ZachXBT's investigations are funded solely through donations. Source: Х

The Ronin Network hack exposed vulnerabilities in DApps. What went wrong, and how can DeFi projects strengthen security? Read more in our latest report!

The content on The Coinomist is for informational purposes only and should not be interpreted as financial advice. While we strive to provide accurate and up-to-date information, we do not guarantee the accuracy, completeness, or reliability of any content. Neither we accept liability for any errors or omissions in the information provided or for any financial losses incurred as a result of relying on this information. Actions based on this content are at your own risk. Always do your own research and consult a professional. See our Terms, Privacy Policy, and Disclaimers for more details.

Articles by this author
APS Drops €3M on Tokenized Real Estate in Italy—First-Ever Blockchain Deal

APS Drops €3M on Tokenized Real Estate in Italy—First-Ever Blockchain Deal

With €12B in assets under management, APS just closed its first tokenization deal, snapping up fractional shares of two Italian real estate assets via blockchain.

Anton Kryshtal
Demand for Circle Shares Pushes IPO Valuation to $6.9B

Demand for Circle Shares Pushes IPO Valuation to $6.9B

USDC stablecoin issuer Circle Internet Group launches its IPO on the NYSE, increasing the offering to 34 million shares at $31 each and raising around $1.1 billion.

Dmytro Psevdonimenko
Morning Digest: Key News on Ethereum Foundation, JPMorgan & the Fed

Morning Digest: Key News on Ethereum Foundation, JPMorgan & the Fed

JPMorgan weighs Bitcoin ETF-backed lending, Ethereum Foundation updates treasury strategy, Michelle Bowman appointed as Fed overseer. Details in the article.

Dmytro Psevdonimenko
Pakistan to Launch Bitcoin Reserve Using 2,000 MW of Excess Power

Pakistan to Launch Bitcoin Reserve Using 2,000 MW of Excess Power

Islamabad eyes a national Bitcoin reserve powered by 2,000 MW of surplus electricity—framing crypto as a hedge against inflation and macroeconomic volatility.

Anton Kryshtal
From Politics to Protocols: Decoding Eric Trump’s Unexpected Crypto Headlines

From Politics to Protocols: Decoding Eric Trump’s Unexpected Crypto Headlines

Politics continues to move into crypto, and Eric Trump’s involvement sparks debate. What drives his interest?

Daryna Nesterenko
Who Is Tomasz Stańczak? Inside the New Leadership of the Ethereum Foundation

Who Is Tomasz Stańczak? Inside the New Leadership of the Ethereum Foundation

Tomasz Stańczak is one of the co-executive directors at the Ethereum Foundation, contributing to strategic planning and operational oversight to support Ethereum’s long-term growth.

Anahit Avetisyan
Robert Kiyosaki and the Debt-Fueled Prophecy

Robert Kiyosaki and the Debt-Fueled Prophecy

Robert Kiyosaki says the end is here. With $1.2B in U.S. debt and a $1M Bitcoin prediction, the Rich Dad author is turning collapse into his ultimate performance.

Elina Moskovchuk
What Is a DDoS Attack in Crypto? A Guide to Defense in 2025

What Is a DDoS Attack in Crypto? A Guide to Defense in 2025

DDoS attacks remain one of the most serious threats to crypto infrastructure. They can disrupt websites, crypto exchanges, DeFi protocols, and blockchain nodes.

Daryna Nesterenko
Are Crypto IPOs Overhyped? A Closer Look at the Boom

Are Crypto IPOs Overhyped? A Closer Look at the Boom

Crypto IPOs are booming, driven by market optimism and clearer regulations. But are they a sign of industry maturity or just another wave of hype? We take a closer look.

Anahit Avetisyan
What Is Milady? Inside Ethereum’s Most Controversial NFT Cult 

What Is Milady? Inside Ethereum’s Most Controversial NFT Cult 

Milady is a prominent NFT collection often seen as social media profile pictures, but its complex story extends far beyond mere aesthetics.

Anahit Avetisyan
Strategic Bitcoin Reserve: What the U.S. Is Really Planning

Strategic Bitcoin Reserve: What the U.S. Is Really Planning

In March 2025, the U.S. officially announced a strategic Bitcoin reserve, becoming the first nation to incorporate a digital asset into its national reserve policy.

Vlad Vovk
What Is Aztec Network? 2025 Milestones and the Path to Mainnet

What Is Aztec Network? 2025 Milestones and the Path to Mainnet

Aztec is a privacy network on Ethereum, designed to allow developers to build privacy-focused decentralised applications without compromising transparency.

Anahit Avetisyan
zkEVM Explained: A New Way to Scale Ethereum Without Breaking It

zkEVM Explained: A New Way to Scale Ethereum Without Breaking It

Solving Ethereum’s congestion, zkEVM tech supports native bytecode and familiar dApps — but slashes gas fees, accelerates confirmation, and adds embedded privacy layers.

Vlad Vovk
Bitcoin Price Crashes to $103K After China Ban and Trump’s Threats Roil Markets

Bitcoin Price Crashes to $103K After China Ban and Trump’s Threats Roil Markets

A double blow from China’s crypto crackdown and Trump’s trade threats caused Bitcoin price to plunge to $103K, sparking concern among investors.

Anton Kryshtal
Bitcoin Price Falls to $105K as Traders React to Tariff Confusion and Volatility

Bitcoin Price Falls to $105K as Traders React to Tariff Confusion and Volatility

With uncertainty clouding U.S. tariff rulings and speculative pressure mounting, Bitcoin price retreated to the $105,000 support mark.

Anton Kryshtal
MORE
Crypto Spam Attacks: How to Save Your Deposit and Your Nerves

Crypto Spam Attacks: How to Save Your Deposit and Your Nerves

Unexpected airdrops, shady tokens in your wallet, pushy Discord messages, and weird invites to NFT projects—let’s learn how to stay afloat in a stream of digital noise.

Iaroslava Kramarenko
Why Crypto Trading Isn’t Gambling (Even If It Feels That Way Sometimes)

Why Crypto Trading Isn’t Gambling (Even If It Feels That Way Sometimes)

Is crypto trading just digital gambling? At first glance, the line seems thin. But they’re worlds apart: one relies on analysis and strategy, the other on luck and addiction.

Iaroslava Kramarenko
MORE