ZachXBT Unmasks $28M Bittensor Hacker via Anime NFT Trail

TheCryptoTimesPublicado em 2025-10-16Última atualização em 2025-10-16

Crypto sleuth ZachXBT has uncovered how $28 million was stolen from Bittensor. In a recent post, he said that he followed a trail that led through anime NFT trades and traced the funds back to a former Bittensor worker after unmasking hidden transactions made through the Railgun crypto mixer.

According to ZachXBT, 32 TAO holders lost funds between May and July 2024 after a malicious PyPi package caused private key leaks. Consequently, the Bittensor network halted operations on July 2, 2024, while developers investigated the breach. He started tracing the stolen TAO tokens that were moved to Ethereum and later exchanged for Monero (XMR) using quick-swap platforms.

Following the crypto trail

ZachXBT followed the stolen funds to a wallet known as 0x09f, which moved about $4.94 million into Railgun in June 2024. He identified three wallets that extracted the funds by comparing the quantity and timing of payments and withdrawals. The trail showed 1,246 ETH, 276,000 USDC, and 19.8 WETH were shifted to Avalanche and then back to Ethereum using the Synapse Bridge.

The investigation took a surprising turn when address 0x1d7 purchased four Killer GF NFTs for 18.64 ETH, grossly overpaying the floor price. Moreover, related wallets 0x0bc7 and 0x5e9c exchanged NFTs between themselves using stolen funds, showing clear wash trading patterns. These unusual trades connected the theft to a wallet tied to “Rusty,” a person using the alias otc_rusty, who once worked as an Opentensor engineer.

Real world links and legal fallout

ZachXBT revealed that Rusty (Ayden B) later admitted ownership of the identified wallets during a civil lawsuit, though he denied involvement in the hack. Another individual, Jon L (0xJones), also became a suspect after deleting messages and deactivating his accounts post-incident.

“It’s extremely rare to see exploits or hacks involve NFT wash trading,” ZachXBT noted, emphasizing how coordinated the addresses appeared. Moreover, he said law enforcement could move forward with criminal proceedings based on these findings.

ZachXBT’s findings show that in crypto, digital trails can still reveal the truth behind hidden transactions. The case reveals that careful tracking and transparency help uncover complex hacks.

Also Read: MIT Brothers on Trial for $25M Crypto Theft Case

Mobile Only Image

Leituras Relacionadas

Introducing: Global Metrics Suite

Glassnode introduces the Global Metrics Suite, a new framework for analyzing the fragmented cryptocurrency market through aggregated on-chain and market data. It solves the challenge of structural discontinuities in traditional aggregate series by using formally rebalanced baskets (e.g., by market cap) and provides two output types: Raw Aggregates (preserving original units) and Indices (scaled, continuous series for trend comparison). The article demonstrates the value of continuity-adjusted indices through three examples. First, they reveal a significant 2024 surge in small-cap market cap, a rally invisible in raw data where "winners" leave the basket upon crossing a threshold. Second, a global Spent Output Profit Ratio (SOPR) index shows that small-cap sentiment is more stable than raw data suggests, while larger caps exhibit a trend of decreasing profit realization per cycle. Third, an Open Interest index highlights the higher volatility and leverage spikes in mid- and small-cap derivatives, useful for monitoring cascade risks. Four metrics are currently available via API: Total Market Cap, Realized Cap, Median SOPR, and Total Open Interest, each for "All Coins," Large, Mid, and Small Cap baskets. The framework, using weekly rebalancing and equal weighting, brings the continuity discipline of traditional finance indices to multi-asset crypto analytics.

insights.glassnodeHá 5m

Introducing: Global Metrics Suite

insights.glassnodeHá 5m

Google Engineer Arrested For Using Company’s Own Search Data To Win $1.2 Million On Polymarket

A Google information security engineer, Michele Spagnuolo, has been arrested and charged with commodities fraud, wire fraud, and money laundering. Prosecutors allege he used confidential internal Google search data to place bets on the crypto-based prediction market Polymarket, winning approximately $1.2 million by knowing outcomes before the public. Using an internal tool showing real-time search trends, he reportedly placed successful wagers on contracts tied to Google's "Year in Search" rankings for 2025. This is the second federal criminal case involving Polymarket insider trading in just over a month, following an April arrest of a U.S. Army sergeant accused of using classified military information. The cases highlight increasing legal scrutiny of prediction markets, with blockchain transparency aiding prosecutors. Google placed Spagnuolo on leave and is cooperating with authorities.

bitcoinistHá 56m

Google Engineer Arrested For Using Company’s Own Search Data To Win $1.2 Million On Polymarket

bitcoinistHá 56m

Galaxy Weighs Theories After $8.3M Bitcoin Burn Mystery

Galaxy Research is investigating a mysterious Bitcoin transaction where approximately 107 BTC (worth $8.3 million) was deliberately sent to a provably unspendable "burn" address. The primary question is the motive behind destroying such a large sum. Galaxy proposed several theories, including a tax-loss strategy (though deemed unlikely for old coins), a religious or ideological act, an attempt to dispose of illicit funds, or coercion. The firm suggested a plausible explanation could be an automated error, where a trading system mistakenly sent funds to a known burn address labeled "Counterparty" instead of the intended recipient. Galaxy acknowledged all theories are speculative, and the true reason may never be known.

bitcoinistHá 2h

Galaxy Weighs Theories After $8.3M Bitcoin Burn Mystery

bitcoinistHá 2h

Six Complaints from an Ethereum Developer

A disgruntled early Ethereum developer and token holder presents six core criticisms of the project's trajectory, contrasting it with Solana's rise. 1. **Premature Complacency**: The Ethereum Foundation shifted from a "building" to an "infrastructure" mindset too soon, adopting a passive, "retired chairman" posture before securing market dominance, reflected in ETH's ~65% decline against BTC post-Merge. 2. **Misguided Messaging**: The Merge was marketed primarily on ESG (99.95% energy reduction) rather than user benefits like speed or yield, appealing to internal ideals instead of market demands. 3. **Delayed Execution**: Proof-of-Stake, on the roadmap since 2015, took seven years to launch, ceding critical narrative and development windows. Competitors like Solana built entire ecosystems in that time. 4. **Poor Native Staking UX**: Years after the Merge, there is still no first-party, user-friendly staking application, forcing reliance on centralized services like Lido and undermining ETH's "sound money" narrative. 5. **Managed Decline**: The rollup-centric roadmap deliberately weakens the base layer's fee capture, outsourcing value and profitability to L2s like Arbitrum and Base, which issue their own tokens and fragment capital. 6. **Ideology Over Product**: Ethereum culture prioritizes philosophical purity ("credible neutrality," "public goods") over competitive product delivery that meets user demands (e.g., financialization), while Solana's ecosystem focuses on coordinated execution. The diagnosis is accumulated execution debt, not a coordination failure. Ethereum possessed a structural advantage in 2021 but spent years in governance debates, while Solana efficiently executed. The current market cap reflects these specific strategic failures, not abstract theory.

marsbitHá 2h

Six Complaints from an Ethereum Developer

marsbitHá 2h

Six Complaints from an Ethereum Developer

Six Grievances from an Ethereum Developer The author, an early investor and developer still building on Ethereum, expresses deep frustration with its trajectory and declining ETH/BTC price since the merge. The core argument is that Ethereum's current market position stems from concrete failures in execution and strategy, not abstract coordination problems. The first grievance targets a shift in the Ethereum Foundation's mentality from builders to "infrastructure," adopting a premature posture of a retired victor. Second, marketing the Merge around ESG (99.95% energy reduction) is seen as talking to its own conscience rather than the market, which prioritizes user experience and yield. Third, the seven-year delay in delivering Proof-of-Stake (PoS) ceded critical narrative and development time to competitors like Solana. Fourth, three years post-merge, there is still no user-friendly first-party staking application, forcing reliance on centralized services like Lido and undermining ETH's monetary narrative. Fifth, the rollup-centric roadmap has strategically surrendered base-layer fee capture to L2s, fragmenting value within the ecosystem while Solana demonstrates an integrated L1's value accrual. Finally, the author criticizes an institutional culture that prioritizes philosophical ideals (credible neutrality, pluralism) over competitive product delivery focused on what users actually want. The diagnosis is "accumulated execution debt." Ethereum possessed a structural advantage in 2021 but spent years in governance debates, while Solana's ecosystem coordinated efficiently to deliver and capture the next wave of value. The conclusion is that Ethereum's market cap reflects its abandonment of the fight for asset appreciation.

链捕手Há 2h

Six Complaints from an Ethereum Developer

链捕手Há 2h

Trading

Spot
Futuros
活动图片

Categorias popularesright-arrow

Etiquetas Popularesright-arrow