ZachXBT hyperlinks flashy pockets to US authorities expenses of $90 million theft

• Recorded B4B chats expose stay pockets administration and create clear proof for regulation enforcement
• Reverse tracing hyperlinks John’s pockets to US authorities seized funds from Bitfinex scandal
• Amid heightened scrutiny and threat, swift account cleanup occurred after put up hinting at stress

ZachXBT, a widely known cryptocurrency researcher, has linked a risk actor known as John, often known as Rick, to a pockets holding tens of millions of {dollars} in cryptocurrencies. The findings implicate greater than $90 million in John’s suspected stolen funds, together with funds related to U.S. authorities seizure addresses.

Moreover, the investigation gained additional momentum after a recorded group chat incident revealed the possession of the pockets in actual time. Because of this, leaked footage may go away a transparent path for future regulation enforcement actions.

‘Band for Band’ recording causes pockets publicity

ZachXBT reported that John bought right into a heated argument with one other risk actor, Dritan Caprani Jr., in a gaggle chat. Within the cybercrime scene often known as The Com, one of these showdown is called band versus band, or b4b. Moreover, the interplay was absolutely recorded, making the dispute greater than only a dialog.

Within the first half, John Display screen shared his Exodus pockets stability linked to his Tron tackle. The tackle displayed was TMrWCLMS3ibDbKLcnNYhLggohRuLUSoHJgheld roughly $2.3 million. Nonetheless, the second half shortly escalated as extra funds had been moved in the course of the trade.

Whereas Dritan continued to mock John, one other pockets obtained roughly $6.7 million in ETH. The pockets tackle is 0xd8bc7ea538c2e9f178a18cc148892ae914a55d08. Along with that, ZachXBT stated that John later transferred a complete of roughly $23 million to the 0xd8bc pockets. So it seems that the recordings confirmed John in command of each addresses.

Observe funding sources

ZachXBT then traced again the transactions to substantiate the origin of the funds. Pockets 0xd8bc reportedly obtained funds from 0x8924, and John confirmed that it was his. Moreover, 0x8924 obtained 1,066 WETH from 0xc7a2 on November 20, 2025.

ZachXBT stated 0xc7a2 obtained $24.9 million from a US authorities tackle in March 2024. The tackle was related to the Bitfinex hack seizure incident flagged by ZachXBT in October 2024. Importantly, about $18.5 million nonetheless stays. 0xc7A253fD3C61CF69d043e6184c107dF4E29475B5.

ZachXBT additionally identified that 0xd8bc is related to over $63 million in inflows in This autumn 2025. Moreover, the inflows reportedly included funds from alleged sufferer addresses and addresses related to authorities seizures.

New leads and fast on-line cleanup

Additional inflows had been seen throughout a number of addresses in November and December 2025. Moreover, ZachXBT famous that a further 4.17,000 ETH, value roughly $12.4 million, flowed into 0xd8bc from MEXC. The explanation for the switch was 0xe0f7a45a491d53f9361d35b4ef9908986d3b37b7.

ZachXBT additionally reported that John has an extended historical past of flaunting his wealth and mocking others on Telegram. The Telegram ID linked to John is 8269661864, and it has been urged that John could also be John Dagitia, who was arrested in September 2025, however ZacXBT stated additional analysis is required to substantiate the identification.

After ZachXBT posted his findings, John reportedly deleted his NFT username and adjusted his Telegram display title. The ensuing speedy cleanup urged that stress was mounting as public consideration elevated.

Associated: Cryptocurrency researcher ZachXBT warns about faux Hyperliquid apps on Google Play Retailer