ArticlePropose editHistory

ZachXBT

From memecoin.wiki, the free memecoin encyclopedia
ZachXBT
ZachXBT
Image: X profile avatar of @zachxbt
handle@zachxbt
roleon chain investigator
known forBybit Lazarus attribution, the 243 million dollar Genesis creditor theft case, exposing scam promoters

ZachXBT is a pseudonymous on chain investigator whose unpaid forensic work has led to arrests and convictions in major crypto thefts, and whose threads on scam influencers and celebrity coins are treated as the closest thing the trenches have to law enforcement.

Contents
  1. 1 Investigations
  2. 2 The trenches beat
  3. 3 Controversies
  4. 4 References

ZachXBT is a pseudonymous American blockchain investigator who has become the de facto internal affairs department of crypto. According to his Wikipedia biography, he entered the space around 2017, lost money to fraudulent ICO era projects, taught himself blockchain analysis, and began publishing investigative threads on X in 2021. His investigations are usually free and crowdfunded by donations, and in February 2025 he joined the venture firm Paradigm as an incident response advisor. Court filings from 2023 cited in later reporting identify him as Zachary Wolk, though he continues to operate under the pseudonym.

Investigations

His casework spans the entire crypto crime landscape. An early investigation into a Bored Ape Yacht Club phishing ring that stole 2.5 million dollars in NFTs led to arrests and convictions in France. In August 2024 he noticed an unusually large Bitcoin movement and unraveled the theft of about 243 million dollars from a Genesis creditor, tracing 4,064 BTC across more than fifteen exchanges; the work contributed to the arrests of Malone Lam and Jeandiel Serrano in September 2024, Veer Chetal in March 2025, and Danish Zulfiqar in December 2025. Within hours of the February 21, 2025 Bybit hack he submitted evidence attributing the 1.5 billion dollar theft to North Korea's Lazarus Group, an attribution later confirmed by the FBI. In January 2026 he investigated the theft of 46 million dollars in crypto seized by the US Marshals Service, leading to an arrest that March. He has also quantified that Coinbase users were losing roughly 300 million dollars a year to social engineering scams.

The trenches beat

For the trenches, ZachXBT matters most as the standing audit of KOL culture. He has documented paid promotions and pump and dump patterns around celebrity tokens, including the wave of hijacked and rented celebrity accounts associated with Sahil Arora in 2024, and his investigation tied the May 2024 hack of GCR's X account to the team behind a Solana memecoin. When a launch like the LIBRA scandal or a suspicious insider pattern hits, "wait for Zach" is a stock response on Crypto Twitter. CoinDesk named him among its Most Influential figures of 2025.

Controversies

His stature has drawn scrutiny of his own finances. In early 2025 he withdrew roughly 3.9 million dollars from the liquidity pool of an unsolicited tribute memecoin created in his name, which critics called hypocritical given his coverage of memecoin extraction; he responded that the token was unsolicited and disclosed other income including community funding and payments from protocols, per KuCoin and Datawallet summaries. Separately, subjects of his investigations have periodically accused him of inaccuracy or selective targeting, though his major case outcomes have repeatedly been validated by law enforcement.

References

Category: People