In an industry plagued by thefts and scams, one anonymous figure has emerged as the crypto world's most relentless investigator: ZachXBT.
Often described as a "blockchain detective," he's not part of law enforcement or any official regulator — yet his impact has rivaled them all. With nothing more than an internet connection and raw tenacity, he's tracked down hundreds of millions in stolen assets and exposed countless scammers, grifters, and hackers.
ZachXBT is filling a vacuum that most governments and crypto companies are either unwilling or unable to address. Operating anonymously across Telegram, X, and blockchain explorer tools, he's become the last hope for victims — and the worst nightmare for fraudsters.
The 10-point wake-up call
This week, ZachXBT released a scathing message in a private Telegram group — not targeting one hack or individual, but the entire broken system. In a series of 10 questions, he laid out how law enforcement, crypto exchanges, and the justice system repeatedly fail victims of theft.
Each question hit like a gut punch:
What happens when >95% of law enforcement (LE) is not competent enough to trace a basic theft and seize frozen funds from centralized platforms?
What happens when a victim is located in one jurisdiction but the perpetrator is in a different uncooperative jurisidiction?
What happens when the perpetrator is a minor so LE chooses to not pursue further?
What happens when teams and exchanges are not willing to collaborate with the private sector?
What happens when a victim cannot pursue litigation to recover frozen funds because retaining a firm costs more than the amount stolen?
What happens when offshore exchanges have jurisidictional uncertainty due to regulatory arbitrage and refuse to honor court orders?
What happens when a major publicized incident occurs but a stablecoin issuer requires an impossible ask of a court order within minutes in order to blacklist?
What happens when founders profit millions in fees from laundering stolen funds and then refuse to return them as they flex record user metrics on X?
What happens if the government makes KYC mandatory for Defi but companies with breaches of sensitive PII are never held liable?
What happens when the legal system can be easily abused with incomplete tracing due to outdated laws rather than facts?
What happens when thefts
From victim to vigilante
ZachXBT started as a scam victim himself — losing money in the early days of crypto. But instead of rage-quitting the space, he started investigating. He began posting meticulous threads exposing influencers running rug pulls, tracing stolen coins across blockchain wallets, and even collaborating with law enforcement in high-profile investigations.
Despite his anonymity, his reach is enormous. Exchanges now take his alerts seriously. Victims turn to him before they even file police reports. And hackers often go silent after he posts — knowing he's already two steps ahead.
His work has even led to arrests and fund recoveries. But he rarely celebrates — instead, he uses each win as fuel to highlight how rare accountability still is in this space.
Crypto hacks surge in 2025
The crypto industry is under siege in 2025, with over $2.17 billion stolen so far this year — already surpassing the total losses of 2024. According to the latest Chainalysis Crypto Crime Report, the most devastating incident came from North Korea's $1.5 billion ByBit hack, the largest crypto theft in history.
But beyond the headline-grabbing breaches, another alarming trend is quietly exploding: personal wallet compromises now account for 23.35% of stolen funds — a growing share that signals a shift in attacker strategy. Criminals are targeting individuals over institutions, capitalizing on lax personal security and jurisdictional dead zones. More than $8.5 billion in stolen funds from individuals remains untouched on-chain.
Chainalysis warns that violent "wrench attacks" — where attackers physically coerce victims into giving up keys — are also on the rise and correlate with Bitcoin price spikes. As digital wealth increases, so does physical vulnerability.
Meanwhile, launderers are getting smarter. Funds stolen from services are laundered using chain hopping, mixers, and bridges, often at premiums as high as 14.5x the average transaction fee — all to outrun detection. In contrast, many personal wallet hackers simply park the stolen assets on-chain, confident they won't be traced.
Geographically, the U.S., Germany, and Russia lead in number of victims, while Eastern Europe, MENA, and CSAO show the fastest growth in new cases. The report also highlights the jurisdictional gridlock that stops law enforcement from acting — especially for thefts under $100K, cross-border crimes, and minors as perpetrators.
This story was originally reported by TheStreet on Aug 20, 2025, where it first appeared in the Innovation section. Add TheStreet as a Preferred Source by clicking here.
