Wojtek Kulisz aka Merry (SIM-Swap Gang)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4JFUAB…7qkGSummary
Wojtek Kulisz, known online as 'Merry', is a Polish national alleged to be a social engineering threat actor linked by blockchain investigator ZachXBT to a four-person SIM-swap criminal ring arrested by Polish and U.S. authorities on June 25, 2026. The group is accused of breaching telecom infrastructure, hijacking victims' phone numbers, draining cryptocurrency exchange accounts, and laundering proceeds estimated to exceed tens of millions of Polish zlotys (approximately $15 million USD). Polish authorities have not officially confirmed Kulisz's identity among the detained, but he has been placed in pretrial detention alongside three co-suspects pending trial.
Connected Entities
3 entities · 60 linked investigations- Wojtek Kulisz aka Merry (SIM-Swap Gang)→mentioned with→ZachXBT(70%)
- Wojtek Kulisz aka Merry (SIM-Swap Gang)→mentioned with→Wojtek Kulisz ('Merry') — SIM Swap Crypto Theft Ring(80%)
- Wojtek Kulisz ('Merry') — SIM Swap Crypto Theft Ring→mentioned with→ZachXBT(70%)
Connected Through
2 shared actors · 447 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □ZachXBTorganizationalso inDean Daghita / CMDSS (Command Services and Support)·0Gurhan Kiziloz·0Gurhan Kiziloz (BlockDAG Co-Founder)·0$91M Bitcoin Social Engineering Theft — Hardware Wallet Impersonation (August 2026)·0Blockchain Bandit·0Faris Ali / UK Crypto Home Invasion Ring·0Yelo (yelotree)·0Lab·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0Ben 'BitBoy' Armstrong·0Inferno Drainer·0DSJEX / BG Wealth Sharing·0Poland SIM-Swap Crypto Theft Ring — June/July 2026·0LastPass threat actor·0Fake Trezor Support Social Engineering — $282M Heist·0LAB / LABUSDT·0Chris Larsen·0Gamer Crew $263M Social Engineering Ring (New Defendants)·0Drift Protocol DPRK Exploit (April 2026)·0fake Ledger Live app·0Malone Lam·0LAB Token (LabsAI)·0Tiffany Milanovich·0AscendEX — Insolvency and Withdrawal Freeze (July 2026)·0Malone Lam Crypto Syndicate·0Broox Bauer / Axiom Insider Trading Ring·0Swift Wave Capital·0EVM Cross-Chain Wallet-Drain Campaign (June 2026)·0DPRK·0DSJEX / BG Wealth Sharing Ponzi·0AscendEX (BitMax)·0John Daghita (aka Lick) — US Marshals Crypto Theft·0Fake MetaMask Update Phishing Campaign (May 2026)·0Apple App Store — Systematic Fake Crypto Wallet Cluster (26 Apps, April 2026)·0CREAM Lending·0Pump.fun·0263M RICO Social Engineering Crypto Theft Gang (DC — 2024-2026 Prosecutions)·0Fake Hyperliquid App·0Heisenberg Guru (HSBG)·0Cream Finance·0StableMagnet·2AnubisDAO·2SudoRare·2Jonathan Spalletta·2Aman Kesar India Crypto Scam Ring·2HQI Exchange·2Trenton Richard Johnston·2Blur Finance·2ETHTrustFund·2Gotbit·2HyperVault·2Bitforex·2Wiz Khalifa Pump Fun·2Iran War Panic Crypto Scam Network (ORAMAMA / X Account Manipulation)·2Mr. Parveen India Social Engineering Scam Ring·2Aqua·2eXch·2Malone Lam·2Vkevin·2AnubisDAO·2Transit Finance·2Marlon Ferro (GothFerrari)·2Wojtek Kulisz ('Merry') — SIM Swap Crypto Theft Ring·2Leva Heal Limited (Fake Ledger Live App - Apple App Store)·2Faris Ali·2RaveDAO·2MangoFarmSOL·2Veer Chetal·2AI Fake X Account Crypto Scam Network 2026·2Magnate Finance·2NFTMachine·2Glori Finance·2ArbiSwap·2Trenton Johnston — Crypto Social Engineering Theft Ring·2RiskOnBlast·2ORAMAMA X War-Panic Scam Network·2Aquabot (AQUA)·2Kokomo Finance·2M1llionz (RichMilly666)·3AudiA6 Mixing Service·3ORAMAMA Token ($ORAMAMA)·3Sahil Arora·3ZKasino·3Garden Finance Cross-Chain Bridge — July 2026 Solver Database Exploit·3LAB Token (Smartliquid AI)·4AscendEX Exchange·4Brandon Michael Tardibone·4RaveDAO (RAVE Token)·4LML/USDT staking protocol·4Raidparty·4Friend Tech·47zarc·4Crypto Beast (ALT Token Influencer)·4LAB Token·4Axiom Exchange·4Meerkat Finance·4LAB Token (AI Terminal / Vova Sadkov)·4CrediX Finance·4Merlin DEX·4DogWifTools·4Ashcrypto — ROYA Token Pump-and-Dump·4Crypto Beast·4Safe Dollar·4BlockDAG Network·4Uranium Finance·4Undisclosed KOL Promo Network (ZachXBT Exposé, September 2025)·5Grand Base·5WallStreetBets·5JELLY·5GANA Payment·5Nobitex·50x327a81d0d128db8886d265be73c9fdda97194f30·5LuBian·5Sportsbet·6Rivus DAO·8Wonderland Finance·8Axiom DEX Insider Trading (Broox Bauer)·8C&M Software·8ValueDefi·8UwuLend·8James Wynn·8pump.fun·8Trove Markets·8SUNRAY·FINANCE·8Humanity Protocol June 2026 Exploit·8SIREN Token·9MemeCore (M Token)·9Nobitex June 2025 Hack (Predatory Sparrow)·10Sheldon Xia (BitMart Founder)·10UwU Lend·10xToken·10AlphaPo·10Munchables·10Phemex·10PolyNetwork·10PrismaLST·10FixedFloat·10Abracadabra Spell·10US Government Crypto Wallet·10BearnFi·12Rain Protocol (RAIN Token)·12Meteora / Benjamin Chow·12Abracadabra Money MIM Depeg June 2026·12ZachXBT Crypto Influencer Paid-Promotion Leak (200+ Influencers, September 2025)·12Gym Network·12Popsicle Finance·12LastPass·12Masa·12Tapioca DAO·12Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)·12Dough Finance·12LND·12Soulja Boy (DeAndre Cortez Way)·12MyAlgo·12Undisclosed KOL Paid-Promotion Network (2025)·12Vee Finance·12ElementalDeFi·12pNetwork·12Cypher Protocol·12Indexed Finance·12Uwerx·12Humanity Protocol H Token Hack·13Terence Kwok — Humanity Protocol Staged Hack·14Ionic Money·14Shawn Liu·14Garden Finance·14Garden·14Rain Protocol·14AutoShark Finance·14ARA Finance·14Bybit v. DPRK Lazarus Group -- $1.5B Hack Civil Lawsuit (August 2026)·14Arthur Hayes — Maelstrom CIO Exit Liquidity Allegations·14Austin Fine (@xmrfine)·18MoonHacker·18JUDAO·18Skyward Finance·18Cyrus Finance·18Humanity Protocol June 2026 Hack·18Kroll·18Cetus CLMM·18Noones·18Concentric·18Alpha Finance Lab·18HyPC·18OKX DEX·18Convergence·18OcelotDex·18BTC24H·18CheeseBank·18Ionic Protocol·18LaunchZone·18MonoSwap·18WAYGU CASH·18Broox Bauer·18Humanity Protocol - Staged Hack Allegation (ZachXBT)·18Axiom DEX·18Ashcrypto·18Stabble·18Wasabi Protocol·18Eesee (Abandoned NFT Marketplace by LAB Founders)·18RIVER Token·18TMX TRIBE·18Siren (SIREN)·18BitcoinDepot·18ForceBridge·201EU2pMence1UfifCco2UHJCdoqorAtpT7·20FEGex·22EdgeX / EDGE Token·22XT Exchange·22ElasticSwap·22DeltaPrime·22Ratio Finance·22Locus Finance·22Wise Lending V1·22Axiom DEX Employee Insider Trading·22FutureSwap·22Shido·22Earning.Farm·22Eclipse·22RocketSwap Base·22Pike V1·22Renzo·22MYX Finance·22Geoffrey Woo / AntiHunter (ANTIHUNTER) Memecoin·22Arcadia Finance v1·22Molt EVM·22SurgeBNB·22Warp Protocol·22ApeRocket·22Palmswap·22Corepound·22MSCST (MSC Protocol)·22MemeCore·22WXETA·22Onyx Protocol·22Abracadabra Finance (MIM Stablecoin)·22Local Traders·22Minterest·22Magic Internet Money·22Punk Protocol·22Metawin·23BigONE Exchange·24ALEX Lab·24Giddy·25Vitalik Buterin·25Shuffle (shuffle.com)·26PAAL AI·28SharedStake·28Aperture LM·28Orion Pools·28TBTFW (Beverly Hills Luxury Car Dealer — Crypto Laundering Vector)·28Kinto Bridge·28ALEX Lab·28Truflation·28Token 2049·28GeniusAI·28JRNY Crypto·28Growth DeFi·28KyberSwap Classic·28Moola Market·28OlaXBT·28UPCX·28CrossCurve·28BtcTurk·28Spartans Bet·28Portal·28SBI Crypto·28Level Finance·28Kronos Research·28US Permissionless Dollar·28GriffinAI·28Roe Finance·28BetterBank·28Rubic·28MEXC·28ACT·28Omm·28Crema Finance·28Axiom Trading·28Arcadia V2·28MM Finance Cronos·28Revest Finance·28BitBNS·28Trust Wallet Chrome Extension Hack (December 2025)·28Trinity Wallet·28Seedify·28Singularity Finance·28Thorchain DEX·28AzukiDAO·28Netmind AI·28Platypus Finance·28Slope Wallet·28Cardex·28KuCoin·28Orange Finance·28ANDY·28Abracadabra Money·28Compound V2·28Belt Finance·28edgeX Exchange·28Arthur Hayes (Maelstrom)·30OKX NFT Aggregator·30Axiom Exchange — Employee Insider Trading Scandal·30Revolut Data Breach (Fake Government Request, September 2026)·30Hegic(old contract)·30Akropolis·30Across Protocol Solana Bridge Exploit (July 2026)·30KAITO·30Nexera·32Serenity Shield·32Arena SocialFi·32PiggyBank Protocol·32Axiom·32Geoffrey Woo·32TeleSwap·32Themis Protocol·32Sentiment·32Eleven Finance·32Tropykus RSK·32LeetSwap·32uniBTC·32zkFinance·32Treasure (TreasureDAO)·32GoonFi·32CoinEx·32Impermax V3·32Axiom (Solana DEX)·32BlueBerry Protocol·32Gate.io·32BingX·32Exactly Protocol·32Berally·32$OATH·32LiFi Finance·32Tender Finance·32Midas Capital·32Zircon Gamma·32Stonk·32Revert Lend·33Neutrl·33Strike·34Andy Ayrey·34Bitget Exchange (Shawn Liu)·34Hyperdrive HL·35CoinStats·35Makina Finance·35Kiln·35Aethir·36Cod3x·36Panoptic V1.1·37Tenderize V2·37Astera.fi·38Ansem / $ANSEM ("Black Bull") creator-coin controversy·38MONA (Monavale / DIGITALAX)·38Volo Vault·38Polymarket — June 2026 Supply Chain Attack·38Dogwifhat (WIF)·38CoinDCX·38PRXVT·38Amun·38Kipseli·38BitoPro·38Astrid Finance·38Thunder Terminal·38Offshore Cryptocurrency Exchanges to Avoid·38MustStopMurad·38WazirX·38four.meme·38Sharwa.Finance·38SIR (Synthetics Implemented Right)·38Polycule·38SubQuery Network·38Sovryn·38Yield Protocol·38Wise Lending V2·38StablR·38Port3 Network·38Rain·38Stake.com·38Save·38Wintermute·38Veil Cash·38GMBL.COMPUTER·38LeadBlock's Morpho Blue Market·38JayPegs Automart·38Bonad·38M2·39Juicebox V3·40Nelly·40SafePal·42CoinEx Exchange Closure (September 2026)·42Tectonic·42DGLD·42Cozy V2·42Raga Finance·42Spectral Labs·42YO Protocol·42Ambient Finance·42Allbridge Core·42Fusion by IPOR·42Lava·42Peapods Finance·42Hacken Token·42Bungee·42DIMO·420G Labs·43Silo V2·44SwissBorg·47Maestro·47Silo Finance·47Ledger Live·50PeopleDAO·52SushiSwap·52Bittensor·52Revolut·52Gondi V3·52Frax Finance·52Bitget·52DMM Bitcoin·52Zabu Finance·52Curve LlamaLend·52LCX·54Trust Wallet·55Transak·55Blast·55Trezor·57Sui·57Gate.io·57Crypto.com·58Ethena·58Eigenlayer·58Ankr·58Monero·58Raydium AMM·62Cointelegraph·62Coinbase·62Circle Internet Financial·62Jupiter Exchange·62Porkbun·62Circle·62Phantom Wallet·63Litecoin·64Hypurr NFTs·66Superteam·72Bybit·72Cardano·72ZachXBT·82
- ⌂Wojtek Kulisz ('Merry') — SIM Swap Crypto Theft Ringprotocol
Community submissions
- Under reviewincriminating7/1/2026, 3:56:32 PM
“Arrest of four suspects in Poland in a SIM-swap ring, with ZachXBT publicly alleging one detainee is Wojtek Kulisz / Merry.”
— avoid-scout
- Under reviewincriminating6/26/2026, 10:08:36 PM
“On June 25, 2026, Polish authorities arrested four members of a criminal group for SIM-swap attacks on cryptocurrency exchanges. ZachXBT alleged that one detainee may be Wojtek Kulisz ('Merry'), a known social-engineering threat actor previously linked to multiple SIM-swap attacks on crypto exchange accounts.”
— avoid-scout
Timeline(3 events)
25 June 2026
Polish Central Bureau for Combating Cybercrime (CBZC), with FBI and HSI support, arrests four suspected members of a SIM-swap crypto theft ring. All four are placed in pretrial detention. Charges include organized crime participation, computer system intrusion, and money laundering.
BleepingComputer / Help Net Security25 June 2026
Blockchain investigator ZachXBT publicly links one of the four arrested suspects to Wojtek Kulisz (alias 'Merry'), citing matching designer clothing and jewelry between CBZC raid footage and Kulisz's public Instagram account 'wojtekk'.
The Block / Cryptopolitan26 June 2026
Multiple crypto and cybersecurity media outlets report on the arrests and ZachXBT's identification of 'Merry'. Estimated stolen and laundered amount reported at approximately $15 million USD (tens of millions of Polish zlotys).
Help Net Security / Crypto Economy / CryptopolitanDecision Log
- hash: 417uHGq33o3kC4r2vSMZpnVtG8ewNbgkHGBJtAf4EBr5
- hash: ELx4Ge5q1AfQCVjqvL7Qf8J5mWiQhespkFgWbWiry8bt
- hash: 7BPDhqrmxDThEDH6YY83k3ZGXMngPgTtFxAsvhCwZaKB
This investigation is cryptographically anchored to the Solana blockchain (3 events). 9 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 6/26/2026, 12:12:50 PM
last updated: 8/26/2026, 6:05:35 PM
4 viewsavoid.net — verified advice for a post-truth world