Michaela
On-chain researcher ZachXBT has rŠ°ised alarms over a suspicious transfer of 3,520 Bitcoin, worth roughly $330.7 million, which caused a spike in the price of Monero, suggesting it may be linked to a major theft.
In a post shared on X on April 28, the on-chain analyst reported that the Bitcoin was transferred from what appears to be a compromised wallet to the address beginning with ābc1qcryā and ending in āvz55g.ā
ZachXBT also pointed out that the stolen Bitcoin was funneled through more than six instant exchange platforms before being converted into Monero (XMR), a privacy-centric cryptocurrency. The large-scale swap appeared to fuel a sharp rally in XMR, sending its price soaring by 50% in a matter of hours.
In a follow-up post on X, on-chain analŃst ZachXBT outlined why the $330 million Bitcoin transfer appears to be tied to a theft. He noted that the wallet in question had been dormant for a significant period, suggesting long-term holdings unlikely to be moved without cause.
Related: Industry Celebrates the New $70M Domain Mogul But His Crypto Shadows Linger
The wallet was also linked to major regulated exchanges such as Gemini, River, and Coinbaseāplatforms where users are typically identity-verified, making such behavior unusual for a legitimate user.
Additionally, rather than consolidating the funds into a single transaction, the sender fragmented the Bitcoin into numerous smaller transfers and routed them through multiple instant, non-KYC exchanges. This approach, commonly associated with laundering, points to an effort to obscure the origin of the funds.
ZachXBT also emphasized that the method of dispersal would result in substantial losses from fees and inefficienciesāan impractical strategy for any legitimate user, but one that aligns with attempts to conceal illicit activity.
When asked whether North Koreaāpotentially referencing the state-sponsored Lazarus Groupāmight be behind the incident, ZachXBT rejected the notion. He stated it was āhighly probable itās not,ā indicating that the theft was more likely carried out by independent hackers rather than a nation-state actor.
Related: Crypto Titans Bunker Down Now: Vitalik’s Austerity Vow, Binance $1B Bitcoin Shield
At the time of writing, Monero is trading at $273.04, reflecting a 12.72% decline over the past 24 hours, according to ŃoinMarketCap data.
The incident has renewed conversations around the use of privacy coins in illicit finance, emphasizing the ongoing tension between financial privacy and regulatory oversight. As scrutiny intensifies, both exchanges and blockchain analytics firms may face increasing pressure to balance user autonomy with proactive monitoring, especially as tactics used by malicious actors become more sophisticated.
Read More
- Token Burn Reversal: ZachXBT Labels CRO a Scam After Crypto.com Backtracks on 70B
- Baby Doge Owner Announces Jason Derulo Airdrop; ZachXBT Says āScamā
- ZachXBT Under Scrutiny After Cashing Out $4M from Meme Coin Tied to His Name
MICHAELA
Michaela is a news writer focused on cryptocurrency and blockchain topics. She prioritizes rigorous research and accuracy to uncover interesting angles and ensure engaging reporting. A lifelong book lover, she applies her passion for reading to deeply explore the constantly evolving crypto world.
