← ZachXBTreviewed 2026-10-16 · 20 claims checked
Fact-check findings
What an automated fact-checker found when it re-read ZachXBT against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
5 claimsThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #2[disputed][awaiting moderator]in section: Notable Investigations and Law Enforcement Outcomes
“All five individuals were subsequently arrested and convicted by French authorities, with AFP explicitly citing ZachXBT's posts on X as contributing to identification of the main suspects.”
reviewerA five-person phishing ring that stole over $2.5 million in BAYC NFTs was arrested and convicted by French authorities after ZachXBT's investigation.Decrypt, Blockworks and AFP-sourced coverage from 2022-2023 confirm the five suspects were charged (fraud committed as part of a criminal gang, money laundering) and two held in pre-trial detention, but no reporting found confirms a conviction or trial verdict. AFP quoted France's cybercrime unit (OCLCTIC) crediting ZachXBT's 'grassroots investigation' with triggering the case, not specifically with 'identification of the main suspects.'Proposed correction (not yet applied)All five individuals were subsequently charged by French authorities, with two held in pre-trial detention pending trial, and AFP reporting that the investigation was triggered by ZachXBT's independent research. - #3[disputed][awaiting moderator]in the timeline
“ZachXBT tracks a five-person phishing ring targeting BAYC NFT holders; all five are later arrested and convicted by French authorities.”
reviewerFive-person BAYC phishing ring arrested and convicted by French authorities (timeline entry).Same overstatement as the corresponding section claim: the record shows charges and pre-trial detention, not a conviction. Same underlying defect as the Notable Investigations section.Proposed correction (not yet applied)ZachXBT tracks a five-person phishing ring targeting BAYC NFT holders; all five are later charged by French authorities, with two held in pre-trial detention. - #5[disputed][awaiting moderator]in section: Notable Investigations and Law Enforcement Outcomes
“The FBI confirmed Lazarus Group responsibility on February 27, 2025.”
reviewerThe FBI confirmed Lazarus Group responsibility for the Bybit hack on February 27, 2025.The cited IC3 Public Service Announcement (alert number I-022625-PSA, URL slug 'psa250226') was published February 26, 2025, not February 27. Fetched directly; the PSA itself gives no February 27 date.Proposed correction (not yet applied)The FBI confirmed Lazarus Group responsibility on February 26, 2025. - #6[disputed][awaiting moderator]in the timeline
“2025-02-27”
reviewerFBI confirms Lazarus Group was responsible for the Bybit hack (timeline date).Same date error as the Notable Investigations section: the IC3 PSA this timeline entry cites is dated February 26, 2025 (confirmed by direct fetch), not February 27.Proposed correction (not yet applied)2025-02-26 - #7[disputed][awaiting moderator]in the timeline
“2024-08-19”
reviewerWired Magazine's description of ZachXBT as 'the most prolific independent crypto-focused detective in the world' dates to August 19, 2024.The Wired piece (Andy Greenberg, 'Meet ZachXBT, the Masked Vigilante Tracking Down Billions in Crypto Scams and Thefts') was published August 10, 2024, per Wikipedia's sourcing. The timeline entry duplicates the date of the separate Bitcoin-detection/Genesis-theft event (also 2024-08-19) rather than giving the article's actual publish date.Proposed correction (not yet applied)2024-08-10
unverifiable
1 claimNo source the reviewer could reach confirms or contradicts the claim.
- #20[unverifiable][awaiting moderator]in section: Investigative Methodology
“He has described his toolkit publicly and has been observed by colleagues such as Nick Bax (Five I's founder) manually analyzing hundreds of transactions within hours of a theft.”
reviewerNick Bax, founder of Five I's, has observed ZachXBT manually analyzing hundreds of transactions within hours of a theft.Nick Bax's identity, his founding of Five I's, and his professional collaboration/rivalry with ZachXBT (e.g. jointly tracing the 2021 AnubisDAO theft) are corroborated, but no source found independently verifies the specific detail of 'manually analyzing hundreds of transactions within hours' as an observed behavior; treated as plausible but unconfirmed color.
link rot
2 claimsA cited source no longer resolves or no longer says what the page attributes to it.
- #17[link rot][awaiting moderator]in section: Pseudonymity, Security Posture, and Impersonation Risks
“CoinTelegraph has reported that ZachXBT impersonators actively target potential victims, using his reputation to run social engineering scams.”
reviewerCointelegraph reported that ZachXBT impersonators actively target potential victims.Directly fetched the cited Cointelegraph URL twice; it returns HTTP 404. The underlying claim is plausible and consistent with other Cointelegraph reporting on fake ZachXBT accounts (e.g. following his account deactivation in Dec 2023), but the specific cited URL is dead. The page's own stored archive_url for this source (Wayback, captured 2024-04-15) is a reasonable live replacement.Proposed correction (not yet applied)http://web.archive.org/web/20240415144155/https://cointelegraph.com/news/zach-xbt-impersonators-potential-victims - #18[link rot][awaiting moderator]in the cited sources
“https://cointelegraph.com/news/zach-xbt-impersonators-potential-victims”
reviewerSource list entry for the Cointelegraph impersonators article.Same dead URL as flagged in the Pseudonymity section; this is the corresponding sources_used entry. The archive_url already stored alongside this entry is a working replacement candidate (not independently re-verified here since web.archive.org could not be fetched directly in this review session, but it is the page's own recorded capture).Proposed correction (not yet applied)http://web.archive.org/web/20240415144155/https://cointelegraph.com/news/zach-xbt-impersonators-potential-victims
partially supported
4 claimsThe cited evidence supports part of the claim but not all of it.
- #4[partially supported][awaiting moderator]in section: Notable Investigations and Law Enforcement Outcomes
“A fourth British suspect, Danish Zulfiqar, was reportedly arrested in Dubai in late 2025.”
reviewerA fourth British suspect, Danish Zulfiqar, tied to the $243M Genesis creditor theft, was reportedly arrested in Dubai in late 2025.Matches ZachXBT's own December 5, 2025 claim (reported by The Block, Yahoo, Forklog) that British threat actor 'Danny/Meech' aka Danish Zulfiqar (Khan), tied to the Genesis theft and the 2023 Kroll SIM-swap breach, was 'likely arrested' in Dubai with ~$18.58M seized. The page's hedge ('reportedly') is appropriate, but no law-enforcement agency (UAE or otherwise) has confirmed an arrest; this remains an unconfirmed claim originating from ZachXBT himself, not independently corroborated. - #10[partially supported][awaiting moderator]in section: Defamation Lawsuit: Huang v. Wolk (2023)
“Within days, ZachXBT's community raised over $1.1 million in legal defense donations through approximately 18,000 Ethereum transactions; prominent supporters included Binance CEO Changpeng Zhao, Kraken co-founder Jesse Powell, and artist Beeple.”
reviewerZachXBT's community raised over $1.1 million in legal defense donations through approximately 18,000 Ethereum transactions, with donors including CZ, Jesse Powell, and Beeple.The $1.1 million total, the roughly three-day fundraising window, and donations from Changpeng Zhao (reported ~$50,000) and Jesse Powell (10 ETH) are each independently confirmed by Blockworks, Decrypt, Forklog and Cointelegraph. No source found in this review mentions a donation from Beeple; one search surfaced Justin Sun as a named high-profile donor instead, raising doubt about the Beeple detail specifically. The '18,000 Ethereum transactions' figure could not be independently confirmed. - #15[partially supported][awaiting moderator]in section: Notable Investigations and Law Enforcement Outcomes
“ZachXBT published an investigation alleging that John Daghita (operating as 'Lick'), son of Dean Daghita (president of CMDSS, a USMS contractor), stole approximately $46 million in seized cryptocurrency from U.S. government wallets.”
reviewerJohn Daghita, operating as 'Lick', son of Dean Daghita (president of CMDSS, a USMS contractor), stole approximately $46 million in seized cryptocurrency from U.S. government wallets.The $46 million figure matches the later, final reporting (Decrypt, TRM Labs, CoinDesk's March 5 piece) after the investigation concluded with Daghita's arrest. However, the cited January source for the timeline entry on this same investigation is titled '...stole USD40 million of seized crypto' -- the initial estimate was approximately $40 million; the $46 million total reflects the figure after further tracing. This is not a contradiction so much as an evolving estimate that the page does not flag as having changed. - #16[partially supported][awaiting moderator]in section: Notable Investigations and Law Enforcement Outcomes
“Over $9 million in stolen funds was frozen and more than $500,000 returned to the victim.”
reviewerOver $9 million in stolen funds from the Genesis creditor theft was frozen and more than $500,000 returned to the victim.The ~$9 million frozen figure (with help from Binance and researchers) is corroborated across multiple outlets. The '$500,000 returned to the victim' detail is reported with some ambiguity -- AMBCrypto describes it as recovered from within the frozen total rather than as a separate amount definitively returned to the victim -- so the precise disposition is less clear-cut than the page states.
confirmed
8 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Identity and Background
“His legal name, Zachary Wolk, was revealed involuntarily through court filings in the 2023 defamation case Huang v. Wolk (No. 1:23-cv-00683) in the United States District Court for the Western District of Texas.”
reviewerZachXBT's legal name (Zachary Wolk) was revealed through the 2023 defamation case Huang v. Wolk, case no. 1:23-cv-00683, in the U.S. District Court for the Western District of Texas.Confirmed via Wikipedia and Cointelegraph reporting: Jeffrey Huang's complaint, filed June 15, 2023 in W.D. Tex. (Austin Division), docket 1:23-cv-00683, named Zachary Wolk and disclosed his jurisdiction of residence. - #8[confirmed][no action needed]in section: Notable Investigations and Law Enforcement Outcomes
“Lam and Serrano were arrested on September 18, 2024 in Miami and Los Angeles respectively.”
reviewerMalone Lam and Jeandiel Serrano were arrested September 18, 2024 in Miami and Los Angeles respectively, in connection with the $243M Genesis creditor theft.Confirmed by CoinDesk (arrested 'Wednesday night,' i.e. Sept 18) and NBC Miami, which states Lam was taken into custody in Miami and Serrano in Los Angeles. - #9[confirmed][no action needed]in section: Defamation Lawsuit: Huang v. Wolk (2023)
“The lawsuit arose from a June 2022 investigation ZachXBT published alleging Huang had embezzled 22,000 ETH (approximately $37.8 million at time of writing) from Formosa Financial, a cryptocurrency treasury management platform Huang co-founded.”
reviewerZachXBT identified three perpetrators in the $243 million Genesis creditor theft; the alleged embezzlement figure of 22,000 ETH from Formosa Financial was worth approximately $37.8 million at the time of writing.Directly fetched the cited CoinDesk article, which states the 22,000 ETH was 'worth nearly $38 million at the time of writing' -- matches the page's $37.8 million figure closely. - #11[confirmed][no action needed]in section: Defamation Lawsuit: Huang v. Wolk (2023)
“His legal defense was handled by Brown Rudnick partner Stephen Palley.”
reviewerZachXBT's legal defense was handled by Brown Rudnick partner Stephen Palley.Confirmed: multiple contemporaneous reports (Decrypt, The Defiant, Forklog) name Stephen Palley and the Brown Rudnick firm (same firm that represented Johnny Depp against Amber Heard) as ZachXBT's counsel. - #12[confirmed][no action needed]in section: Funding and Affiliations
“Paradigm co-founder Matt Huang stated that ZachXBT had helped recover over $350 million for hack and scam victims.”
reviewerParadigm co-founder Matt Huang stated ZachXBT had helped recover over $350 million for hack and scam victims.Confirmed: Matt Huang's public post accompanying the February 2025 hire specifically attributes the $350 million recovery figure to ZachXBT. This is Huang's own estimate and has not been independently audited (some other outlets cite different, unaudited totals such as ~$435 million), which the page could note but does not misstate. - #13[confirmed][no action needed]in section: Funding and Affiliations
“In August 2025, ZachXBT was announced as a launch partner for the Beacon Network, a real-time fund-freezing coordination platform developed by blockchain intelligence firm TRM Labs.”
reviewerZachXBT was announced as a launch partner for TRM Labs' Beacon Network in August 2025.Confirmed: TRM Labs announced Beacon Network on August 20, 2025, listing ZachXBT among launch partners alongside exchanges (Coinbase, Binance, Kraken) and other researchers (SEAL, zeroShadow). - #14[confirmed][no action needed]in section: Notable Investigations and Law Enforcement Outcomes
“John Daghita was arrested on the island of Saint Martin on March 5, 2026 in a joint FBI and French Gendarmerie operation, with FBI Director Kash Patel publicly announcing the arrest.”
reviewerJohn Daghita was arrested on the island of Saint Martin on March 5, 2026 in a joint FBI/French Gendarmerie operation, with FBI Director Kash Patel publicly announcing the arrest.Confirmed by multiple outlets (Bleeping Computer, Forklog, St. Maarten News, The Register): arrest in Saint Martin by a joint FBI/French GIGN operation, with Kash Patel publicly confirming on his official account. Some sources give the arrest date as March 4 with the announcement on March 5; the page's framing is consistent with this. - #19[confirmed][no action needed]in section: Recognition and Industry Standing
“CoinDesk included him on its Most Influential 2024 list.”
reviewerZachXBT was named to CoinDesk's Most Influential 2024 list.Confirmed via Wikipedia sourcing; CoinDesk has also run him in its Most Influential lists for other years (2022, 2025), which the page does not need to cover but is consistent background.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.