Dritan Kapllani Jr.
Summary
Dritan Kapllani Jr. is an 18-year-old US-based individual publicly identified by on-chain investigator ZachXBT on May 12, 2026, as allegedly responsible for approximately $19 million in cryptocurrency social engineering thefts spanning August 2025 through March 2026. He is named as 'Co-Conspirator 1' in a federal criminal complaint (case no. 26-cr-20181, S.D. Fla.) unsealed May 11, 2026, charging associates Trenton Richard David Johnston and Brandon Michael Tardibone, though Kapllani himself had not been formally charged as of May 15, 2026. Following ZachXBT's public exposure, Kapllani allegedly moved $2.59 million in funds into harder-to-freeze assets through a newly created wallet.
Connected Entities
1 entitiesCommunity submissions
- Under reviewincriminatingWayback pending6/4/2026, 3:02:46 AM
“Post-exposure $2.59M fund movement by Kapllani Jr. after ZachXBT public identification, consistent with flight-risk asset concealment”
— avoid-scout
- Under reviewincriminatingWayback pending6/1/2026, 3:13:14 AM
“CryptoTimes coverage of ZachXBT May 12 investigation naming Kapllani Jr. as Co-Conspirator 1 in a federal complaint linking him to $19M in social engineering thefts.”
— avoid-scout
“May 2026 update: Kapllani named uncharged co-conspirator in unsealed U.S. criminal complaint. ZachXBT documents $19M in alleged thefts and April 2026 Discord screen-share of $3.68M wallet.”
— avoid-scout
Timeline(8 events)
2025-08-01
Alleged start of first cluster of social engineering thefts later attributed to wallet 0x97da0685dbba50b4cbabb0ca9e8336f4fbe41122; at least five separate incidents totaling approximately $5.85 million alleged across August through October 2025.
2026-01-23
ZachXBT published investigation into John Daghita ('Lick'), who allegedly exposed one of Kapllani's older wallet addresses during an online Telegram dispute, contributing to the later investigation of Kapllani.
2026-03-14
185 BTC (approximately $13 million) allegedly stolen from a victim through social engineering impersonating hardware wallet support. Stolen Bitcoin split across multiple addresses and bridged to Ethereum between approximately 1:10 AM and 2:41 AM.
2026-03-15
On-chain tracing showed $5.3 million from the 185 BTC theft landing in wallet 0x4487db847db2fc99372a985743a26f46e0b2bba6, allegedly controlled by Kapllani.
2026-04-23
Kapllani allegedly joined a 'Band 4 Band' Discord voice channel and screen-shared his Exodus wallet displaying approximately $3.68–4.17 million in assets, inadvertently exposing wallet address 0x4487db847db2fc99372a985743a26f46e0b2bba6 to investigators.
2026-05-11
DOJ unsealed criminal complaint in the Southern District of Florida (case no. 26-cr-20181) charging Trenton Richard David Johnston and Brandon Michael Tardibone in connection with the 185 BTC theft. Multiple outlets reported Kapllani named as 'Co-Conspirator 1' in the complaint.
2026-05-12
ZachXBT published an eight-part thread on X (post ID 2054170002945987029) publicly naming Dritan Kapllani Jr. as a US-based threat actor allegedly tied to $19 million in social engineering crypto thefts.
2026-05-15
ZachXBT reported via Telegram that Kapllani had moved $2.59 million (1.99M DAI and 259 ETH) from wallet 0x4487db847db2fc99372a985743a26f46e0b2bba6 to newly created wallet 0x67ec1d405e53ed13a19eb77a9db19186723d125d. As of this date, Kapllani remained uncharged in public filings.
Decision Log
- hash: J4LTzcsLBdqe3gsj9v1qRbc3hS3uZF1WkcQ55F7dYtFc
- hash: Wciqmyw3z36ibPFU9u3iyGr4tMdorkerTmKbbKwcQjZ
- hash: FBCBrhY7Pxws8xMcMF8fYJaXFwKYAw2dJpakX1qzqP4K
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/22/2026, 3:52:25 PM
last updated: 5/30/2026, 4:05:54 AM
avoid.net — verified advice for a post-truth world