Share
Share this article
Copy linkX (Twitter)LinkedInFacebookEmail
Finance
Share
Share this article
Copy linkX (Twitter)LinkedInFacebookEmail
A hacker’s $23 million ‘flex’ backfires afte
Finance
Share
Share this article
Copy linkX (Twitter)LinkedInFacebookEmail
A hacker’s $23 million ‘flex’ backfires afte
A hacker’s $23 million ‘flex’ backfires after sleuth traces funds to a massive U.S. government seizure
6 min read
A hacker’s $23 million ‘flex’ backfires after sleuth traces funds to a massive U.S. government seizure
A recorded online dispute between alleged threat actors led blockchain investigator ZachXBT to trace millions in illicit crypto to a single wallet.
By Oliver Knight|Edited by Stephen Alpher
Updated Jan 23, 2026, 4:56 p.m. Published Jan 23, 2026, 3:58 p.m.
Make us preferred on Google
Crypto 'flex' goes wrong as ZachXBT exposes wallet owner (Modified by CoinDesk)
What to know:
- A wallet allegedly controlled by an individual known as “John” or “Lick” was linked by ZachXBT to more than $90 million in suspected illicit crypto, including funds originating from a U.S. government-controlled Bitfinex seizure address.
- The wallet activity surfaced after a recorded “band for band” dispute, in which the individual screen-shared wallets and moved millions of dollars in real time, appearing to demonstrate control over multiple addresses.
- Blockchain tracing shows the funds passed through wallets connected to government seizure addresses and suspected victims, echoing past cases where cybercriminals exposed themselves by publicly flaunting stolen assets.
A cryptocurrency wallet allegedly controlled by a threat actor known as “John” has been linked to more than $90 million in suspected illicit funds, including assets tied to a prior U.S. government seizure related to the Bitfinex hack, according to blockchain investigator ZachXBT.
In a thread published on X, ZachXBT said the individual — who uses the alias “John” or “Lick” — was recorded "flexing" control over roughly $23 million in crypto during a heated online exchange with another alleged threat actor.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
Sign me up
The funds were later traced back to wallets associated with government-controlled seizure addresses and other suspected victims.
The incident stemmed from a dispute between John and another threat actor in an online group chat. The two engaged in what is known in cybercrime circles as a “band for band” a contest to prove control over cryptocurrency holdings. The entire exchange was recorded.
In one portion of the recording, John screen-shares an Exodus wallet showing a Tron address holding about $2.3 million. In another segment, an additional $6.7 million in ether ETH$2,948.68 is transferred live into an Ethereum address later identified as 0xd8bc. By the end of the exchange, approximately $23 million had been consolidated into that wallet. ZachXBT said the footage demonstrates John’s control over multiple addresses.
Tracing the funds backward, ZachXBT linked 0xd8bc to another wallet, 0x8924, which John allegedly confirmed owning. That address received 1,066 wrapped ether (WETH) in November 2025 from 0xc7a2, a wallet that ZachXBT said received $24.9 million in March 2024 from a U.S. government address tied to the Bitfinex hack seizure. Roughly $18.5 million remains in that wallet, he said.
ZachXBT added that 0xd8bc received more than $63 million in additional inflows during late 2025 from addresses associated with suspected victims. On Thursday, the wallet received another 4,170 ETH, worth roughly $12.4 million, from a centralized exchange.
The case draws parallels with a $243 million social engineering hack in 2024, where the two bad actors posed as Google support staff before flaunting their ill-gotten gains on social media. Miami police eventually arrested both suspects.
Zachxbtcrypto crime
More For You
KuCoin Hits Record Market Share as 2025 Volumes Outpace Crypto Market
KuCoin captured a record share of centralised exchange volume in 2025, with more than $1.25tn traded as its volumes grew faster than the wider crypto market.
What to know:
- KuCoin recorded over $1.25 trillion in total trading volume in 2025, equivalent to an average of roughly $114 billion per month, marking its strongest year on record.
- This performance translated into an all-time high share of centralised exchange volume, as KuCoin’s activity expanded faster than aggregate CEX volumes, which slowed during periods of lower market volatility.
- Spot and derivatives volumes were evenly split, each exceeding $500 billion for the year, signalling broad-based usage rather than reliance on a single product line.
- Altcoins accounted for the majority of trading activity, reinforcing KuCoin’s role as a primary liquidity venue beyond BTC and ETH at a time when majors saw more muted turnover.
- Even as overall crypto volumes softened mid-year, KuCoin maintained elevated baseline activity, indicating structurally higher user engagement rather than short-lived volume spikes.
View Full Report
More For You
Stablecoins moved $35 trillion last year but only 1% of it was for 'real world' payments
While stablecoins settled around $35 trillion last year, only around 1% of that represented genuine payments like remittances and payroll, a new report found.
What to know:
- Stablecoins processed more than $35 trillion in transactions last year, but only about 1% of that reflected real-world payments, a report by McKinsey and Artemis Analytics found.
- The study estimated that roughly $390 billion in genuine stablecoin payments, such as vendor payments, payrolls, remittances and capital markets settlements.
- Despite rapid growth and increasing interest from traditional payment firms like Visa and Stripe, true stablecoin payments still account for just a tiny fraction of the more than $2 quadrillion global payments market, the report said.
Read full story
Latest Crypto News
Senate Agriculture's crypto market structure draft peppered with Democrat pitches
SEC dismisses lawsuit against billionaire Winklevoss twins-backed Gemini over Earn product
FBI arrests ex-Olympian drug 'kingpin' who allegedly used crypto to move proceeds
Stablecoins moved $35 trillion last year but only 1% of it was for 'real world' payments
U.S. Senator Warren rebuffed on delay of World Liberty bank charter over Trump ties
Kevin O'Leary says power is now more valuable than bitcoin
Top Stories
Binance plans to bring back tokenized stock trading after 2021 retreat
Crypto custodian BitGo down 12%, falling well below IPO price on second trading day
Buying ether and Bitmine Immersion ahead of weekend a good bet: Standard Chartered
Binance’s Changpeng Zhao says bitcoin will ‘break’ the four-year cycle this year
Latest Crypto News
Senate Agriculture's crypto market structure draft peppered with Democrat pitches
SEC dismisses lawsuit against billionaire Winklevoss twins-backed Gemini over Earn product
FBI arrests ex-Olympian drug 'kingpin' who allegedly used crypto to move proceeds
Stablecoins moved $35 trillion last year but only 1% of it was for 'real world' payments
U.S. Senator Warren rebuffed on delay of World Liberty bank charter over Trump ties
Kevin O'Leary says power is now more valuable than bitcoin
Top Stories
Binance plans to bring back tokenized stock trading after 2021 retreat
Crypto custodian BitGo down 12%, falling well below IPO price on second trading day
Buying ether and Bitmine Immersion ahead of weekend a good bet: Standard Chartered
Binance’s Changpeng Zhao says bitcoin will ‘break’ the four-year cycle this year
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.
You May Also Like
Recovery extends to $88.20, momentum improves
The post Recovery extends to $88.20, momentum improves appeared on BitcoinEthereumNews.com. Silver price extended its recovery for the second straight day, up by
Share
BitcoinEthereumNews2026/02/05 07:34
Fed Decides On Interest Rates Today—Here’s What To Watch For
The post Fed Decides On Interest Rates Today—Here’s What To Watch For appeared on BitcoinEthereumNews.com. Topline The Federal Reserve on Wednesday will conclude a two-day policymaking meeting and release a decision on whether to lower interest rates—following months of pressure and criticism from President Donald Trump—and potentially signal whether additional cuts are on the way. President Donald Trump has urged the central bank to “CUT INTEREST RATES, NOW, AND BIGGER” than they might plan to. Getty Images Key Facts The central bank is poised to cut interest rates by at least a quarter-point, down from the 4.25% to 4.5% range where they have been held since December to between 4% and 4.25%, as Wall Street has placed 100% odds of a rate cut, according to CME’s FedWatch, with higher odds (94%) on a quarter-point cut than a half-point (6%) reduction. Fed governors Christopher Waller and Michelle Bowman, both Trump appointees, voted in July for a quarter-point reduction to rates, and they may dissent again in favor of a large cut alongside Stephen Miran, Trump’s Council of Economic Advisers’ chair, who was sworn in at the meeting’s start on Tuesday. It’s unclear whether other policymakers, including Kansas City Fed President Jeffrey Schmid and St. Louis Fed President Alberto Musalem, will favor larger cuts or opt for no reduction. Fed Chair Jerome Powell said in his Jackson Hole, Wyoming, address last month the central bank would likely consider a looser monetary policy, noting the “shifting balance of risks” on the U.S. economy “may warrant adjusting our policy stance.” David Mericle, an economist for Goldman Sachs, wrote in a note the “key question” for the Fed’s meeting is whether policymakers signal “this is likely the first in a series of consecutive cuts” as the central bank is anticipated to “acknowledge the softening in the labor market,” though they may not “nod to an October cut.” Mericle said he…
Share
BitcoinEthereumNews2025/09/18 00:23
Wormhole launches reserve tying protocol revenue to token
The post Wormhole launches reserve tying protocol revenue to token appeared on BitcoinEthereumNews.com. Wormhole is changing how its W token works by creating a new reserve designed to hold value for the long term. Announced on Wednesday, the Wormhole Reserve will collect onchain and offchain revenues and other value generated across the protocol and its applications (including Portal) and accumulate them into W, locking the tokens within the reserve. The reserve is part of a broader update called W 2.0. Other changes include a 4% targeted base yield for tokenholders who stake and take part in governance. While staking rewards will vary, Wormhole said active users of ecosystem apps can earn boosted yields through features like Portal Earn. The team stressed that no new tokens are being minted; rewards come from existing supply and protocol revenues, keeping the cap fixed at 10 billion. Wormhole is also overhauling its token release schedule. Instead of releasing large amounts of W at once under the old “cliff” model, the network will shift to steady, bi-weekly unlocks starting October 3, 2025. The aim is to avoid sharp periods of selling pressure and create a more predictable environment for investors. Lockups for some groups, including validators and investors, will extend an additional six months, until October 2028. Core contributor tokens remain under longer contractual time locks. Wormhole launched in 2020 as a cross-chain bridge and now connects more than 40 blockchains. The W token powers governance and staking, with a capped supply of 10 billion. By redirecting fees and revenues into the new reserve, Wormhole is betting that its token can maintain value as demand for moving assets and data between chains grows. This is a developing story. This article was generated with the assistance of AI and reviewed by editor Jeffrey Albus before publication. Get the news in your inbox. Explore Blockworks newsletters: Source: https://blockworks.co/news/wormhole-launches-reserve
Share
BitcoinEthereumNews2025/09/18 01:55