ZachXBT
Summary
ZachXBT (legal name Zachary Wolk, revealed through 2023 court filings) is a pseudonymous American blockchain investigator and OSINT researcher who has operated since 2021, publishing forensic investigations into cryptocurrency fraud, scams, and large-scale thefts. He is widely regarded as one of the most consequential independent crypto investigators, credited with helping recover over $350 million in stolen assets and contributing evidence that has led to multiple arrests across several countries. He maintains strict anonymity and has no formal law enforcement affiliation, though he joined Paradigm as an incident response advisor in February 2025.
Connected Entities
19 entities · 60 linked investigations- Zachary Wolk→member of→ZachXBT(90%)
- Nick Bax→member of→ZachXBT(80%)
- Taylor Monahan→member of→ZachXBT(80%)
- Five I's→associated with→ZachXBT(75%)
- MetaMask→associated with→ZachXBT(70%)
- Nick Bax→controls→Five I's(80%)
- Taylor Monahan→member of→MetaMask(80%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→Ethereum(65%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→ZachXBT(70%)
- Ethereum→mentioned with→Bitcoin(60%)
- + 44 more
Timeline(17 events)
2017
ZachXBT enters the crypto space during the ICO boom and begins losing money to fraudulent projects, which later motivates his investigative work.
ZachXBT - Wikipedia2018
ZachXBT suffers a wallet hack losing approximately $15,000, which he has cited as a turning point toward self-taught blockchain analysis.
Who is ZachXBT? - BeInCrypto2021
ZachXBT begins publishing investigative threads on X (Twitter), establishing his presence as a pseudonymous blockchain investigator.
ZachXBT - Wikipedia2021
ZachXBT tracks a five-person phishing ring targeting BAYC NFT holders; all five are later arrested and convicted by French authorities.
ZachXBT - WikipediaJune 2022
ZachXBT publishes investigation alleging Jeffrey 'Machi Big Brother' Huang embezzled 22,000 ETH (~$37.8 million) from Formosa Financial.
Crypto Detective ZachXBT Faces Defamation Lawsuit - CoinDesk15 June 2023
Jeffrey Huang files federal defamation lawsuit (Huang v. Wolk, 1:23-cv-00683) in U.S. District Court for the Western District of Texas; court filings reveal ZachXBT's legal name Zachary Wolk.
Crypto Sleuth ZachXBT Sued, Doxxed by Former Target - Decrypt16 June 2023
ZachXBT launches legal defense fund; raises over $1.1 million in cryptocurrency within days from approximately 18,000 Ethereum transactions.
Crypto sleuth ZachXBT raises $1.1 million for legal defense - Blockworks14 August 2023
Jeffrey Huang voluntarily withdraws defamation lawsuit. ZachXBT amends his investigative article, removing embezzlement allegations and other sharp characterizations. ZachXBT pledges to return unused defense funds.
ZachXBT, Machi Big Brother defamation suit has been dropped - Blockworks19 August 2024
ZachXBT detects an unusually large Bitcoin transaction while preparing to board a flight, triggering his investigation into the $243 million Genesis creditor theft.
ZachXBT - Wikipedia19 August 2024
Wired Magazine describes ZachXBT as 'the most prolific independent crypto-focused detective in the world.'
ZachXBT - Wikipedia18 September 2024
Malone Lam and Jeandiel Serrano are arrested in Miami and Los Angeles respectively in connection with the $243 million Genesis creditor theft, following ZachXBT's investigation.
Police Arrest Two People Related to $243M Crypto Heist - CoinDesk21 February 2025
Bybit exchange suffers approximately $1.46 billion hack. ZachXBT submits forensic evidence attributing the attack to North Korea's Lazarus Group within hours, sharing findings with Arkham Intelligence.
Bybit Loses $1.5B in Hack but Can Cover Loss - CoinDesk27 February 2025
FBI confirms North Korea's Lazarus Group was responsible for the Bybit hack, corroborating ZachXBT's attribution.
IC3 Public Service Announcement - North Korea Responsible for Bybit Hack26 February 2025
ZachXBT announces he has joined Paradigm as an incident response advisor; Paradigm co-founder Matt Huang states ZachXBT helped recover over $350 million for victims.
Onchain sleuth ZachXBT joins Paradigm as incident response advisor - The Block23 January 2026
ZachXBT publishes investigation alleging John Daghita ('Lick'), son of a USMS cryptocurrency contractor, stole approximately $46 million in seized crypto from U.S. government wallets.
U.S. marshals investigate claim of $40 million crypto theft - CoinDesk5 March 2026
John Daghita is arrested on the island of Saint Martin in a joint FBI and French Gendarmerie operation. FBI Director Kash Patel publicly announces the arrest and credits ZachXBT's investigation.
Son of contractor managing seized crypto for U.S. Marshals arrested in France - CoinDeskDecision Log
- hash: DwEk9gDtQFLW9LHVbbHhSgCkdXrYZiz8bPW2k1Ygx6Kn
- hash: 6mLoXuQZF5wV34iUzyotYpiUYM28VPBFtnJNDKmrV2Cn
- hash: DKeVtKtKAizPSwGjpESXzBzRh8qcknQBjkk6rBS7gHCU
This investigation is cryptographically anchored to the Solana blockchain (3 events). 22 of 23 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 4/20/2026, 2:36:25 AM
last updated: 7/24/2026, 5:16:24 PM
5 viewsavoid.net — verified advice for a post-truth world