There’s a crypto story that not many people fully know. ZachXBT wasn’t recruited by any intelligence agency, and he didn’t come out of Wall Street. His origin is far more brutal: in 2018, he lost more than $15,000 in ETH due to rug pulls and a brutal hack. But instead of disappearing from the space, he did something different. He opened Etherscan and started reading like an unlicensed private investigator.

What’s interesting about ZachXBT is that he taught himself using only public tools. Wallet after wallet, contract after contract, he tracked the movements. He treated every transaction like a crime scene—mixers, bridges, exchanges. He mapped out money flows that others didn’t even know existed.

By May 2021, he had already published his first serious report. He exposed Impact Theory and its suspicious fundraising. Then came Rogue Society—15,777 NFTs minted—and the developers simply vanished. ZachXBT tracked the wallets, posted the Discord receipts, and the founder fled from his hiding spot.

The case that made him known was Pixelmon. A $70M collapse. ZachXBT found evidence that the minting funds had been used for the team to buy Bored Apes for their personal wallets. Then he dismantled a phishing network that had stolen $2.5M in BAYC NFTs. He mapped everything. Five people were arrested in France. The police publicly thanked him.

In 2022, he published a 10-part investigation on Machi Big Brother. He linked 21 wallets to $37M in missing funds. The response was a defamation lawsuit. But the crypto community moved fast, raised $1M for his legal defense, and ZachXBT didn’t retract a single word. Machi withdrew the lawsuit.

Then came the biggest cases: the Lazarus Group—hackers sponsored by Corea del Norte—behind the Ronin and Harmony bridge exploits. ZachXBT mapped $200M in fund flows through Tornado Cash and ChipMixer, as well as Asian exchanges. He shared those maps directly with law enforcement. The funds were frozen.

What’s fascinating is that he did all of this without a license, without an official employer, and without showing his face. The U.S. Secret Service cited his work. French cybercrime units contacted him directly. Arkham paid him to unmask wallet owners. He exposed BitBoy, Logan Paul, Lark Davis, and Kyle Chasse. More than 200 investigations in 4 years.

In 2025, Paradigm hired him as an Incident Response Advisor. Matt Huang credited him with recovering more than $350M for victims. And ZachXBT continues to use the same cartoon platypus avatar. He still doesn’t show his face.

He doesn’t track wallets by tracing them. He tracks behaviors, maps hidden pipelines, uses only public data, and publishes proof first. He lets the system expose scammers. It’s the opposite of what most of the industry does. And that’s exactly what makes him more effective than anyone who has been officially hired.