ZachXBT
Independent crypto fraud investigator known for tracing stolen funds, exposing scams, and publishing findings on Telegram.
https://t.me/zachxbt102 investigations from this source
Coinbase suffered a documented ecosystem incident with reported losses of $300K on Ethereum. This page tracks DeFiLlama's record of the event.
avoid.net/coindcx→10/100[CRITICAL]CoinDCX suffered a documented infrastructure incident with reported losses of $44.20M on Unknown chain. This page tracks DeFiLlama's record of the event.
avoid.net/hypurr-nfts→10/100[CRITICAL]According to independent investigator ZachXBT, Hypurr NFTs has been flagged for alleged suspicious activity.
avoid.net/ninamo→10/100[CRITICAL]According to independent investigator ZachXBT, Nina/Mo has been flagged for alleged suspicious activity.
avoid.net/aqua→10/100[CRITICAL]According to independent investigator ZachXBT, Aqua has been flagged for alleged suspicious activity.
avoid.net/gana-payment→10/100[CRITICAL]GANA Payment suffered a documented infrastructure incident with reported losses of $3.10M on BSC. This page tracks DeFiLlama's record of the event.
avoid.net/mixin→10/100[CRITICAL]According to independent investigator ZachXBT, Mixin has been flagged for alleged suspicious activity.
avoid.net/hypc→10/100[CRITICAL]According to independent investigator ZachXBT, HyPC has been flagged for alleged suspicious activity.
avoid.net/burgeleth→10/100[CRITICAL]According to independent investigator ZachXBT, burgel.eth has been flagged for alleged suspicious activity.
avoid.net/noones→10/100[CRITICAL]According to independent investigator ZachXBT, Noones has been flagged for alleged suspicious activity.
avoid.net/velodrome→10/100[CRITICAL]According to independent investigator ZachXBT, Velodrome has been flagged for alleged suspicious activity.
avoid.net/nftmachine→10/100[CRITICAL]According to independent investigator ZachXBT, NFTMachine has been flagged for alleged suspicious activity.
avoid.net/inferno-drainer→10/100[CRITICAL]According to independent investigator ZachXBT, Inferno Drainer has been flagged for alleged suspicious activity.
avoid.net/thunder-terminal→10/100[CRITICAL]According to independent investigator ZachXBT, Thunder Terminal has been flagged for alleged suspicious activity.
avoid.net/coinspaid→10/100[CRITICAL]CoinsPaid suffered a documented ecosystem incident with reported losses of $37.30M on Unknown chain. This page tracks DeFiLlama's record of the event.
avoid.net/tornado-cash→10/100[CRITICAL]According to independent investigator ZachXBT, Tornado Cash has been flagged for alleged suspicious activity.
avoid.net/btcturk→10/100[CRITICAL]BtcTurk suffered a documented security incident with reported losses of $54.00M on Unknown chain. This page tracks DeFiLlama's record of the event.
avoid.net/veer-chetal→10/100[CRITICAL]According to independent investigator ZachXBT, Veer Chetal has been flagged for alleged suspicious activity.
avoid.net/bitopro→10/100[CRITICAL]According to independent investigator ZachXBT, BitoPro has been flagged for alleged suspicious activity.
avoid.net/kiln→10/100[CRITICAL]According to independent investigator ZachXBT, Kiln has been flagged for alleged suspicious activity.
avoid.net/cryptocom→10/100[CRITICAL]Crypto.com suffered a documented infrastructure incident with reported losses of $33.70M on Ethereum, Bitcoin. This page tracks DeFiLlama's record of the event.
avoid.net/garden-finance→10/100[CRITICAL]According to independent investigator ZachXBT, Garden Finance has been flagged for alleged suspicious activity.
avoid.net/bitcoindepot→10/100[CRITICAL]According to independent investigator ZachXBT, BitcoinDepot has been flagged for alleged suspicious activity.
avoid.net/nobitex→10/100[CRITICAL]Nobitex suffered a documented infrastructure incident with reported losses of $82.00M on Tron, Ethereum, BSC, Avalanche, Arbitrum, Polygon, Bitcoin. This page tracks DeFiLlama's record of the event.
avoid.net/tapioca-dao→10/100[CRITICAL]Tapioca DAO suffered a documented protocol logic incident with reported losses of $4.70M on Arbitrum. This page tracks DeFiLlama's record of the event.
avoid.net/truflation→10/100[CRITICAL]Truflation suffered a documented infrastructure incident with reported losses of $5.00M on Unknown chain. This page tracks DeFiLlama's record of the event.
avoid.net/nexera→10/100[CRITICAL]Nexera suffered a documented protocol logic incident with reported losses of $1.80M on Ethereum. This page tracks DeFiLlama's record of the event.
avoid.net/rain→10/100[CRITICAL]Rain suffered a documented infrastructure incident with reported losses of $14.80M on Bitcoin, Ethereum, XRP, Solana. This page tracks DeFiLlama's record of the event.
avoid.net/safepal→10/100[CRITICAL]According to independent investigator ZachXBT, SafePal has been flagged for alleged suspicious activity.
avoid.net/sportsbet→10/100[CRITICAL]According to independent investigator ZachXBT, Sportsbet has been flagged for alleged suspicious activity.
avoid.net/lastpass-threat-actor→10/100[CRITICAL]According to independent investigator ZachXBT, LastPass threat actor has been flagged for alleged suspicious activity.
avoid.net/serenity-shield→10/100[CRITICAL]According to independent investigator ZachXBT, Serenity Shield has been flagged for alleged suspicious activity.
avoid.net/sbi-crypto→10/100[CRITICAL]SBI Crypto suffered a documented infrastructure incident with reported losses of $24.00M on Bitcoin, Ethereum, Litecoin, Doge, BitcoinCash. This page tracks DeFiLlama's record of the event.
avoid.net/m2→10/100[CRITICAL]According to independent investigator ZachXBT, M2 has been flagged for alleged suspicious activity.
avoid.net/vkevin→10/100[CRITICAL]According to independent investigator ZachXBT, Vkevin has been flagged for alleged suspicious activity.
avoid.net/bitforex→10/100[CRITICAL]According to independent investigator ZachXBT, Bitforex has been flagged for alleged suspicious activity.
avoid.net/lazarus-group→10/100[CRITICAL]According to independent investigator ZachXBT, Lazarus Group has been flagged for alleged suspicious activity.
avoid.net/pink-drainer→10/100[CRITICAL]According to independent investigator ZachXBT, Pink Drainer has been flagged for alleged suspicious activity.
avoid.net/coinex→10/100[CRITICAL]CoinEx suffered a documented infrastructure incident with reported losses of $55.00M on Ethereum, BSC, Bitcoin, Tron, Kadena, Solana, Dagger, XRP, BitcoinCash, Polygon, Stellar, Arbitrum. This page tracks DeFiLlama's record of the event.
avoid.net/andy-ayrey→10/100[CRITICAL]According to independent investigator ZachXBT, Andy Ayrey has been flagged for alleged suspicious activity.
avoid.net/cm-software→10/100[CRITICAL]C&M Software is a Brazilian Central Bank services provider that allegedly experienced a major cyberattack in June 2025, resulting in approximately $140 million in unauthorized access to financial institutions' reserve accounts. According to ZachXBT (Telegram, 2025-07-04), attackers allegedly gained access through compromised employee credentials and converted tens of millions to cryptocurrency.
avoid.net/porkbun→10/100[CRITICAL]According to independent investigator ZachXBT, Porkbun has been flagged for alleged suspicious activity.
avoid.net/netmind-ai→10/100[CRITICAL]According to independent investigator ZachXBT, Netmind AI has been flagged for alleged suspicious activity.
avoid.net/fake-ledger-live-app→10/100[CRITICAL]A fraudulent Ledger Live app distributed through the Apple App Store allegedly stole $9.5 million from over 50 victims between April 7-13, 2026. According to ZachXBT (Telegram, 2026-04-14), the fake application targeted users across multiple blockchain networks including Bitcoin, Ethereum, Tron, Solana, and Ripple, with stolen funds allegedly laundered through KuCoin exchange addresses.
avoid.net/tradeogre→10/100[CRITICAL]According to independent investigator ZachXBT, TradeOgre has been flagged for alleged suspicious activity.
avoid.net/coinspot→10/100[CRITICAL]CoinSpot suffered a documented infrastructure incident with reported losses of $2.40M on Ethereum. This page tracks DeFiLlama's record of the event.
avoid.net/dprk→10/100[CRITICAL]According to independent investigator ZachXBT, DPRK has been flagged for alleged suspicious activity.
avoid.net/bittensor→10/100[CRITICAL]Bittensor suffered a documented infrastructure incident with reported losses of $8.00M on Unknown chain. This page tracks DeFiLlama's record of the event.
avoid.net/metawin→10/100[CRITICAL]According to independent investigator ZachXBT, Metawin has been flagged for alleged suspicious activity.
avoid.net/blacksuit→10/100[CRITICAL]According to independent investigator ZachXBT, BlackSuit has been flagged for alleged suspicious activity.
avoid.net/andy→10/100[CRITICAL]According to independent investigator ZachXBT, ANDY has been flagged for alleged suspicious activity.
avoid.net/glori-finance→10/100[CRITICAL]According to independent investigator ZachXBT, Glori Finance has been flagged for alleged suspicious activity.
avoid.net/wazirx→10/100[CRITICAL]According to independent investigator ZachXBT, WazirX has been flagged for alleged suspicious activity.
avoid.net/paal→10/100[CRITICAL]According to independent investigator ZachXBT, PAAL has been flagged for alleged suspicious activity.
avoid.net/pendle→10/100[CRITICAL]According to independent investigator ZachXBT, Pendle has been flagged for alleged suspicious activity.
avoid.net/malone→10/100[CRITICAL]According to independent investigator ZachXBT, Malone has been flagged for alleged suspicious activity.
avoid.net/jrny→10/100[CRITICAL]According to independent investigator ZachXBT, JRNY has been flagged for alleged suspicious activity.
avoid.net/sui→10/100[CRITICAL]Sui is a blockchain protocol that reportedly experienced a significant theft incident in December 2024. According to ZachXBT (Telegram, 2025-01-26), an unidentified user was allegedly hacked for $29 million worth of SUI tokens, which were subsequently laundered through cross-chain bridges and privacy protocols.
avoid.net/exch→10/100[CRITICAL]eXch is an instant cryptocurrency exchange that had 34 million euros and its infrastructure seized by Frankfurt prosecutors, according to ZachXBT (Telegram, 2025-05-09). The exchange is alleged to have been used to launder hundreds of millions of dollars from major cryptocurrency hacks and exploits.
avoid.net/bybit→10/100[CRITICAL]Bybit suffered a documented protocol logic incident with reported losses of $1.40B on Ethereum. This page tracks DeFiLlama's record of the event.
avoid.net/kelpdao→10/100[CRITICAL]KelpDAO is a decentralized autonomous organization protocol that allegedly suffered a major exploit resulting in over $280 million in stolen funds across Ethereum and Arbitrum networks. According to ZachXBT, the attack was carried out by North Korean-linked actors who funded their operations through Tornado Cash and subsequently began laundering portions of the stolen funds through various protocols.
avoid.net/eigenlayer→30/100[WARNING]According to independent investigator ZachXBT, Eigenlayer has been flagged for alleged suspicious activity.
avoid.net/0x327a81d0d128db8886d265be73c9fdda97194f30→30/100[WARNING]According to independent investigator ZachXBT, 0x327a81d0d128db8886d265be73c9fdda97194f30 has been flagged for alleged suspicious activity.
avoid.net/jelly→30/100[WARNING]According to independent investigator ZachXBT, JELLY has been flagged for alleged suspicious activity.
avoid.net/lastpass→30/100[WARNING]According to independent investigator ZachXBT, LastPass has been flagged for alleged suspicious activity.
avoid.net/fake-hyperliquid-app→30/100[WARNING]According to independent investigator ZachXBT, Fake Hyperliquid App has been flagged for alleged suspicious activity.
avoid.net/renzo→30/100[WARNING]According to independent investigator ZachXBT, Renzo has been flagged for alleged suspicious activity.
avoid.net/wallex→30/100[WARNING]According to independent investigator ZachXBT, Wallex has been flagged for alleged suspicious activity.
avoid.net/pumpdotfun→30/100[WARNING]According to independent investigator ZachXBT, PumpDotFun has been flagged for alleged suspicious activity.
avoid.net/wasabi→30/100[WARNING]According to independent investigator ZachXBT, Wasabi has been flagged for alleged suspicious activity.
avoid.net/kaito→30/100[WARNING]KAITO is a cryptocurrency token associated with the Kaito Yapper community on X (formerly Twitter), which faced significant market impact after X announced restrictions on InfoFi applications. According to ZachXBT (Telegram, 2026-01-15), the token's price dropped 17% following the announcement that led to the community's removal from the platform.
avoid.net/wiz-khalifa-pump-fun→30/100[WARNING]According to independent investigator ZachXBT, Wiz Khalifa Pump Fun has been flagged for alleged suspicious activity.
avoid.net/wallstreetbets→30/100[WARNING]According to independent investigator ZachXBT, WallStreetBets has been flagged for alleged suspicious activity.
avoid.net/ethena→30/100[WARNING]According to independent investigator ZachXBT, Ethena has been flagged for alleged suspicious activity.
avoid.net/act→30/100[WARNING]According to independent investigator ZachXBT, ACT has been flagged for alleged suspicious activity.
avoid.net/cardano→30/100[WARNING]According to independent investigator ZachXBT, Cardano has been flagged for alleged suspicious activity.
avoid.net/cointelegraph→30/100[WARNING]According to independent investigator ZachXBT, Cointelegraph has been flagged for alleged suspicious activity.
avoid.net/trust-wallet→30/100[WARNING]Trust Wallet suffered a documented infrastructure incident with reported losses of $7.00M on Ethereum, Bitcoin, Solana. This page tracks DeFiLlama's record of the event.
avoid.net/compound-finance→30/100[WARNING]According to independent investigator ZachXBT, Compound Finance has been flagged for alleged suspicious activity.
avoid.net/mexc→30/100[WARNING]According to independent investigator ZachXBT, MEXC has been flagged for alleged suspicious activity.
avoid.net/1eu2pmence1ufifcco2uhjcdoqoratpt7→30/100[WARNING]According to independent investigator ZachXBT, 1EU2pMence1UfifCco2UHJCdoqorAtpT7 has been flagged for alleged suspicious activity.
avoid.net/transak→30/100[WARNING]According to independent investigator ZachXBT, Transak has been flagged for alleged suspicious activity.
avoid.net/across-protocol→30/100[WARNING]According to independent investigator ZachXBT, Across Protocol has been flagged for alleged suspicious activity.
avoid.net/masa→30/100[WARNING]According to independent investigator ZachXBT, Masa has been flagged for alleged suspicious activity.
avoid.net/muststopmurad→30/100[WARNING]According to independent investigator ZachXBT, MustStopMurad has been flagged for alleged suspicious activity.
avoid.net/magnate-finance→30/100[WARNING]Magnate Finance suffered a documented rugpull incident with reported losses of $6.40M on Base. This page tracks DeFiLlama's record of the event.
avoid.net/kroll→30/100[WARNING]According to independent investigator ZachXBT, Kroll has been flagged for alleged suspicious activity.
avoid.net/vitalik-buterin→30/100[WARNING]According to independent investigator ZachXBT, Vitalik Buterin has been flagged for alleged suspicious activity.
avoid.net/circle→30/100[WARNING]According to independent investigator ZachXBT, Circle has been flagged for alleged suspicious activity.
avoid.net/renzo-protocol→30/100[WARNING]According to independent investigator ZachXBT, Renzo Protocol has been flagged for alleged suspicious activity.
avoid.net/trezor→30/100[WARNING]According to independent investigator ZachXBT, Trezor has been flagged for alleged suspicious activity.
avoid.net/ledger→30/100[WARNING]According to independent investigator ZachXBT, Ledger has been flagged for alleged suspicious activity.
avoid.net/strike→30/100[WARNING]According to independent investigator ZachXBT, Strike has been flagged for alleged suspicious activity.
avoid.net/spartans-bet→30/100[WARNING]According to independent investigator ZachXBT, Spartans Bet has been flagged for alleged suspicious activity.
avoid.net/token-2049→30/100[WARNING]According to independent investigator ZachXBT, Token 2049 has been flagged for alleged suspicious activity.
avoid.net/blockchain-bandit→30/100[WARNING]According to independent investigator ZachXBT, Blockchain Bandit has been flagged for alleged suspicious activity.
avoid.net/ton-blockchain→30/100[WARNING]According to independent investigator ZachXBT, TON Blockchain has been flagged for alleged suspicious activity.
avoid.net/pumpfun→30/100[WARNING]pump.fun suffered a documented infrastructure incident with reported losses of $2.00M on Solana. This page tracks DeFiLlama's record of the event.
avoid.net/chris-larsen→55/100[CAUTIONARY]According to independent investigator ZachXBT, Chris Larsen has been flagged for alleged suspicious activity.
avoid.net/friend-tech→55/100[CAUTIONARY]According to independent investigator ZachXBT, Friend Tech has been flagged for alleged suspicious activity.
avoid.net/bonad→55/100[CAUTIONARY]According to independent investigator ZachXBT, Bonad has been flagged for alleged suspicious activity.
avoid.net/nelly→55/100[CAUTIONARY]According to independent investigator ZachXBT, Nelly has been flagged for alleged suspicious activity.