ZachXBT
Summary
ZachXBT (legal name Zachary Wolk, revealed through 2023 court filings) is a pseudonymous American blockchain investigator and OSINT researcher who has operated since 2021, publishing forensic investigations into cryptocurrency fraud, scams, and large-scale thefts. He is widely regarded as one of the most consequential independent crypto investigators, credited with helping recover over $350 million in stolen assets and contributing evidence that has led to multiple arrests across several countries. He maintains strict anonymity and has no formal law enforcement affiliation, though he joined Paradigm as an incident response advisor in February 2025.
Connected Entities
6 entities · 1 linked investigation- + 12 more
Connected Through
1 shared actor · 1 investigationDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ○Taylor Monahanindividualalso inHyperliquid·62
Timeline(17 events)
2017-01-01
ZachXBT enters the crypto space during the ICO boom and begins losing money to fraudulent projects, which later motivates his investigative work.
ZachXBT - Wikipedia2018-01-01
ZachXBT suffers a wallet hack losing approximately $15,000, which he has cited as a turning point toward self-taught blockchain analysis.
Who is ZachXBT? - BeInCrypto2021-01-01
ZachXBT begins publishing investigative threads on X (Twitter), establishing his presence as a pseudonymous blockchain investigator.
ZachXBT - Wikipedia2021-01-01
ZachXBT tracks a five-person phishing ring targeting BAYC NFT holders; all five are later arrested and convicted by French authorities.
ZachXBT - Wikipedia2022-06-01
ZachXBT publishes investigation alleging Jeffrey 'Machi Big Brother' Huang embezzled 22,000 ETH (~$37.8 million) from Formosa Financial.
Crypto Detective ZachXBT Faces Defamation Lawsuit - CoinDesk2023-06-15
Jeffrey Huang files federal defamation lawsuit (Huang v. Wolk, 1:23-cv-00683) in U.S. District Court for the Western District of Texas; court filings reveal ZachXBT's legal name Zachary Wolk.
Crypto Sleuth ZachXBT Sued, Doxxed by Former Target - Decrypt2023-06-16
ZachXBT launches legal defense fund; raises over $1.1 million in cryptocurrency within days from approximately 18,000 Ethereum transactions.
Crypto sleuth ZachXBT raises $1.1 million for legal defense - Blockworks2023-08-14
Jeffrey Huang voluntarily withdraws defamation lawsuit. ZachXBT amends his investigative article, removing embezzlement allegations and other sharp characterizations. ZachXBT pledges to return unused defense funds.
ZachXBT, Machi Big Brother defamation suit has been dropped - Blockworks2024-08-19
ZachXBT detects an unusually large Bitcoin transaction while preparing to board a flight, triggering his investigation into the $243 million Genesis creditor theft.
ZachXBT - Wikipedia2024-08-19
Wired Magazine describes ZachXBT as 'the most prolific independent crypto-focused detective in the world.'
ZachXBT - Wikipedia2024-09-18
Malone Lam and Jeandiel Serrano are arrested in Miami and Los Angeles respectively in connection with the $243 million Genesis creditor theft, following ZachXBT's investigation.
Police Arrest Two People Related to $243M Crypto Heist - CoinDesk2025-02-21
Bybit exchange suffers approximately $1.46 billion hack. ZachXBT submits forensic evidence attributing the attack to North Korea's Lazarus Group within hours, sharing findings with Arkham Intelligence.
Bybit Loses $1.5B in Hack but Can Cover Loss - CoinDesk2025-02-27
FBI confirms North Korea's Lazarus Group was responsible for the Bybit hack, corroborating ZachXBT's attribution.
IC3 Public Service Announcement - North Korea Responsible for Bybit Hack2025-02-26
ZachXBT announces he has joined Paradigm as an incident response advisor; Paradigm co-founder Matt Huang states ZachXBT helped recover over $350 million for victims.
Onchain sleuth ZachXBT joins Paradigm as incident response advisor - The Block2026-01-23
ZachXBT publishes investigation alleging John Daghita ('Lick'), son of a USMS cryptocurrency contractor, stole approximately $46 million in seized crypto from U.S. government wallets.
U.S. marshals investigate claim of $40 million crypto theft - CoinDesk2026-03-05
John Daghita is arrested on the island of Saint Martin in a joint FBI and French Gendarmerie operation. FBI Director Kash Patel publicly announces the arrest and credits ZachXBT's investigation.
Son of contractor managing seized crypto for U.S. Marshals arrested in France - CoinDeskDecision Log
- hash: DwEk9gDtQFLW9LHVbbHhSgCkdXrYZiz8bPW2k1Ygx6Kn
- hash: 6mLoXuQZF5wV34iUzyotYpiUYM28VPBFtnJNDKmrV2Cn
- hash: DKeVtKtKAizPSwGjpESXzBzRh8qcknQBjkk6rBS7gHCU
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 4/20/2026, 2:36:25 AM
last updated: 5/30/2026, 1:02:38 PM
avoid.net — verified advice for a post-truth world