{"id":475,"date":"2025-05-22T09:12:33","date_gmt":"2025-05-22T09:12:33","guid":{"rendered":"https:\/\/bitunikey.com\/news\/alleged-coinbase-hacker-trolls-zachxbt-with-on-chain-message-after-swapping-42-5m-btc\/"},"modified":"2025-05-22T09:12:34","modified_gmt":"2025-05-22T09:12:34","slug":"alleged-coinbase-hacker-trolls-zachxbt-with-on-chain-message-after-swapping-42-5m-btc","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/alleged-coinbase-hacker-trolls-zachxbt-with-on-chain-message-after-swapping-42-5m-btc\/","title":{"rendered":"Alleged Coinbase hacker trolls ZachXBT with on-chain message after swapping $42.5m BTC"},"content":{"rendered":"<p><\/p>\n<div class=\"post-detail__content blocks\">\n<p class=\"is-style-lead\">Crypto sleuth ZachXBT revealed that the hacker accused of stealing Coinbase customer data left him a taunting message on-chain after swapping $42.5 million worth of BTC for ETH on THORChain.<\/p>\n<p>In a broadcast message sent to his Investigations Telegram channel, on-chain investigator ZachXBT claimed to have received a message sent from a hacker accused of swindling more than $300 million worth of crypto assets from users. The message was sent to his on-chain Ethereum (ETH) account.<\/p>\n<p>\u201cThe threat actor who stole $300M+ from Coinbase users by paying customer support just began trolling me on-chain with this message,\u201d said ZachXBT in his Telegram message.<\/p>\n<p>The <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/etherscan.io\/tx\/0x18c909a8438d94e88a434521ee9fc143c8777452fbecb09b034b8fd049d6477f\" target=\"_blank\">message<\/a> was sent from an address simply named Fake_Phishing1158790 and contained the words \u201cL bozo\u201d and what appeared to be a link to a YouTube video showing the viral internet short clip of former NBA athlete James Worthy smoking a cigar after a Lakers win.<\/p>\n<p>\u201cSmoking that ZachXBT pack,\u201d one user commented under the YouTube video, indicating they were led to the video after seeing the on-chain message addressed to the crypto sleuth.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<p>The message was linked to the alleged hacker\u2019s recent on-chain transaction, which consisted of swapping $42.5 million worth of BTC (BTC) for ETH via THORChain.<\/p>\n<p>The Coinbase user data exploit was first disclosed by the exchange on May 15. The hacker was believed to have bribed customer support staff to steal sensitive user data.<\/p>\n<p>According to Coinbase, the attacker was able to get ahold of phone names, addresses, phone numbers, government-issued IDs, and other account data. The exchange claimed that the exploit only affected less than 1% of users. <\/p>\n<p>After firing the customer service workers involved, the company estimated the breach could cost up to $400 million to resolve. The attackers had asked for a $20 million ransom from the crypto exchange. Coinbase refused to pay the $20 million ransom and is offering a bounty for anyone who can track down the attacker.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Crypto sleuth ZachXBT revealed that the hacker accused of stealing Coinbase customer data left him a taunting message on-chain after swapping $42.5 million worth of BTC for ETH on THORChain.&hellip;<\/p>\n","protected":false},"author":1,"featured_media":476,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-475","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/475","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=475"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/475\/revisions"}],"predecessor-version":[{"id":477,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/475\/revisions\/477"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/476"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=475"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=475"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=475"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}