Share this page!

Enter URL or ID to Unroll

You can paste full URL like: https://x.com/threadreaderapp/status/1644127596119195649
or just the ID like: 1644127596119195649

How to get URL link on X (Twitter) App

  1. On the Twitter thread, click on or icon on the bottom
  2. Click again on or Share Via icon
  3. Click on Copy Link to Tweet
  4. Paste it above and click "Unroll Thread"!
  5. More info at Twitter Help
ZachXBT Profile picture
@zachxbt
Jan 3, 2022 • 17 tweets • 9 min read • Read on X
Scrolly
1/ Let’s review all the direct scams Bitboy has worked with in the past. Just in case you forgot here is the flyer with how much he charges.

I received this a while back by posing as a project interested in a promotion.
🧵 👇 ImageImage
2/After Coffeezilla made a video on paid promotions in the crypto space last month an Official Bitboy representative stated they “rigorously vet” projects.

I uncovered 7 direct scams Bitboy actively worked with and promoted to his audience. Image
3/ In Fall 2020 Bitboy worked with $MYX and even was warned by community members. Bitboy has since deleted the video. ImageImage
4/ Also in fall 2020 Bitboy worked with $DISTX a video he titled “my most trusted coin”

He went on to change the video title later on. The video also had zero promotion disclosure & project exit scammed.

The video is still up but don’t worry it has been archived safely by me. ImageImageImageImage
5/ Now we have Zao Finance another project that exit scammed in Fall 2020.

He deleted the tweet but don’t worry I recovered it.

At least he put #ad on the scam right? ImageImageImage
6/ Here’s $ETHY another scam Bitboy worked with in December 2020 that ended up rugging

Notice a pattern here with deleted videos? ImageImageImage
7/ Another one people forget about is $LOCK (Meridian Network) a project he covered twice in late 2020.

The project’s Twitter & Website are no longer there and once again Bitboy deleted his video on it. ImageImageImage
8/ We have the $CPH slow rug promoted by Bitboy (also deleted)

Coin was delayed for years and founder has sketchy past.

Search “$cph scam” for more ImageImage
9/ We also have $PAMP another scam promoted by Bitboy. The video hasn’t been deleted but is unlisted.

I’ve also downloaded this video. ImageImageImage
10/ I’m sure there is more so feel free to drop any comments if you’ve found any

It’s clear simple due diligence is not done and it’s profits over followers with shills. Just bc you delete a video doesn’t mean it didn’t happen

As per usual follow for more threads in the future Image
In case you missed my thread on Bitboy stealing art for his NFTs
An example of plagiarism Bitboy did
Another example of plagiarism Bitboy did this past year
@YouTubeCreators @YouTube @YTAdvertisers how can you let people be continuously taken advantage of by crypto YouTubers with their deceptive advertising…
Oops
Coincidence?
More plagiarism

• • •

Missing some Tweet in this thread? You can try to force a refresh
　

Keep Current with ZachXBT

ZachXBT Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @zachxbt

ZachXBT Profile picture
Nov 3
1/ Time to share how SCALE, NTD, TPU, & OPSEC projects were all tied to the same person Zopp0 to farm naive traders using numerous influencers shown in leaked messages. Image
Image
2/ While paying others to be the face of OPSEC behind the scenes he was involved with key decisions as the owner in private Telegram chats.

Here is him talking about the lack of technical research.

I then confronted him over DM about this in March 2024 which he downplayed.

Then in a leaked private chat here is him chatting about me obtaining this screenshot.Image
Image
Image
Image
3/ Zopp0 and his friend SZB discuss how they messed up bundling for NTD/TPU and worry it will trace back to them.

No posts have been made from @NTensorDynamics @tensorspace_ai since April. Image
Image
Image
Image
Read 7 tweets
ZachXBT Profile picture
Oct 23
1/ Meet Yicong Wang (王逸聪), a Chinese OTC trader who has helped Lazarus Group convert tens of millions of stolen crypto to cash from various hacks via bank transfers since 2022. Image
Image
Image
2/ A follower reached out to me a few months ago after having their exchange account frozen after completing a P2P transaction with Yicong Wang an OTC who has used pseudonyms like Seawang, Greatdtrader, & BestRhea977 Image
3/ They then shared one of Yicong Wang’s Tron wallet addresses with me from a screenshot of their WeChat conversation.

THsSCBGazjjho7u2BQQsmrpbDv1Q237FL4 Image
Read 11 tweets
ZachXBT Profile picture
Oct 20
1/ A short story about how the influencer @0xjaypeg got caught lying to the community three times this weekend about an allocation for a project all for $2.2K. Image
2/ A project reached out to Jaypeg who agreed to promote a meme coin for 2% of the supply.

8jpz1pDotD7NVBWuYQgfSNX2CAVTp6wyD5Jgg7d5515B

After sending his wallet address in the chat Jaypeg deleted his message and lied saying he never received tokens and claimed it was not his wallet.Image
Image
Image
3/ 8jpz1p sold the tokens for ~$2.2K

3XwAA6GpNH6jzpqm6ztbDSixnre3iuB6JXYigdZN1T8EdTUK8qqjoJNf9dp9DpNR2rQHsWzsDHFRvut47p2Zy7zk
5GiGcgtkHPkvHVXCvqqxVzBZD2cLE7nvQMHmkWFnqUtsvcKEJQUuLSmVxVU7G2f8pCWHtnJocSfHRQud5TkK1GZg

The team followed up with him multiple times on it but he shifted the blame to them and did not resolve the mistake.Image
Image
Image
Read 7 tweets
ZachXBT Profile picture
Sep 19
1/ An investigation into how Greavys (Malone Iam), Wiz (Veer Chetal), and Box (Jeandiel Serrano) stole $243M from a single person last month in a highly sophisticated social engineering attack and my efforts which have helped lead to multiple arrests and millions frozen. Image
Image
2/ Incident Summary: On August 19, 2024 the threat actors targeted a single Genesis creditor by:

1) Calling as Google Support via spoofed number to compromise personal accounts
2) Calling after as Gemini support claiming account is hacked
3) Social engineered victim into resetting 2FA and sending Gemini funds to compromised wallet
4) Got victim to use AnyDesk to share screen and leaked private keys from Bitcoin core.

Gemini txn hash
59.34 BTC - Aug 19 at 1:48 am UTC
e747b963a463334c164b0a8fff844f73693272bb2b331adbe2147d70ec196360
14.88 BTC - Aug 19 at 2:30 am UTC
7c7ebed785f0b4d4335d559b14b8215862fbe29db329e3ee0f2a7e64a16ce9e3Image
Image
Image
3/ Here is a private video recording showing the live reaction by multiple of the threat actors to receiving $238M.

Theft txn hash
4064 BTC - Aug 19 at 4:05 am UTC
4b277ba298830ea538086114803b9487558bb093b5083e383e94db687fbe9090
Read 15 tweets
ZachXBT Profile picture
Aug 15
1/ Recently a team reached out to me for assistance after $1.3M was stolen from the treasury after malicious code had been pushed.

Unbeknownst to the team they had hired multiple DPRK IT workers as devs who were using fake identities.

I then uncovered 25+ crypto projects with related devs that have been active since June 2024.Image
Image
2/ The laundering path for the incident can be described as:

1) Transfer $1.3M to theft address
2) Bridge $1.3M from Solana to Etheruem via deBridge
3) Deposit 50.2 ETH to Tornado
4) Transfer 16.5 ETH to two exchanges

Theft address
6USfQ9BX33LNvuR44TXr8XKzyEgervPcF4QtZZfWMnet Image
3/ Using multiple payment addresses for 21 devs I was able to map out a cluster with the most recent batch of payments for ~$375K over the last month.

0xb721adfc3d9fe01e9b3332183665a503447b1d35

In the past week you may have seen me tagging projects telling them to DM me. Image
Read 7 tweets
ZachXBT Profile picture
Jul 18
1/ So I began tracing the $230M+ WazirX hack back from the original exploiter address and was able to make some interesting observations.
Image
2/ The theft address I will start from is 0x6ee which was doing test transactions on July 10th from 0x09b multisig with SHIB and was funded with 6 X 0.1 ETH from Tornado.

0x6eedf92fb92dd68a270c3205e96dccc527728066

A technical breakdown of the attack by Mudit can be found below

Image
Image
3/ With the 6 X 0.1 ETH withdrawals from Tornado Cash on July 10th I was able to demix this and find 6 X 0.1 ETH matching deposits made the day before.

0xc6873ce725229099caf5ac6078f30f48ec6c7e2e

The demix is accurate as 0xc68 was also doing tests with 0x304 multisig on July 9th with SHIB.Image
Read 6 tweets

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

Send Email!

:(