Every Zipp story tagged #ZachXBT, newest first.
On-chain investigator zachxbt traced the haul through an immediate dump, a bridge to Ethereum, and a swap into 7,918 ETH, a textbook private-key compromise playbook.
The exchange blamed a failed strategic transaction and MiCA pressure for the July 1 shutter, but the more dangerous signal is the empty hot wallets ZachXBT flagged weeks earlier.
A former top-10 CEX backed by Polychain and Hack VC went dark on July 1, the same day on-chain sleuth ZachXBT warned that public wallets had run dry on ETH, USDT and SOL.
If hot-wallet reserves in ETH, USDT and SOL are running light, the withdrawal queue stops being an operations problem and starts being a solvency question for users still parked on the venue.
FBI and HSI backed the operation, and onchain sleuth ZachXBT has named detained suspect Wojtek Kulisz as 'Merry', the threat actor behind years of social engineering thefts from crypto holders.
No exploit, no hack, no announcement: the move happened on roughly $21M in volume, and the tokens that did move were the ones ZachXBT flagged months ago as insider-propped and venue-thin.
Arthur Hayes responded on June 13 to on-chain investigator ZachXBT's accusation that he used his following as exit…
The complaint isn't the sanctions themselves — it's that compliance tooling can't tell pre-sanction HTX wallets from post-sanction ones, tainting legitimate address clusters and degrading the risk…
The protocol is also freezing locked LAB from NAV until August — but on-chain investigator ZachXBT says the strategy was the real mistake, not the unwind.
The flagged USDC and USDT are issued on JuCoin's own JuChain — the same closed-loop tokens that won't drain anywhere if withdrawals stay frozen.
The clash crystallises a broader retail-trader grievance: high-profile commentators touting tokens publicly then quietly rotating out before the bid thins out, leaving followers holding the bag.
If the contract address belongs to a privacy protocol's confidential USDC wrapper, an OFAC-style freeze without notice becomes a precedent that every composable stablecoin issuer now has to price…
A targeted exploit on the prediction market's optimistic-oracle bridge — not its main AMM — underscores how interconnected DeFi composability keeps turning a single adapter into a system-level risk…
The breach hit an internal rewards wallet — not core market infrastructure — but it lands in the middle of a deepening pattern of operational-key compromises draining DeFi protocols while user-facing…
The alleged hit lands on the oracle layer Polymarket relies on for resolution — the same architecture pattern that turns a single adapter bug into a market-wide integrity question.
ZachXBT flagged the cross-chain drain on Tuesday, and the protocol paused trading within hours — the second major halt in a year for a venue positioned as a native-asset swap layer.
The on-chain investigator says insiders and an unnamed market maker hold the bulk of supply — but warned the same setup could fuel a push higher, not a flush.
The allegation lands on a regulated venue sitting inside a $1B+ liquidity corridor: a credible on-chain investigator putting a specific DEX and its co-founder on record is the kind of signal…
Lookonchain
TheBlock
WuBlockchain
CoinDesk
CoinTelegraph