🕵🏽nftscamtracker👨🏽‍💻

Hi, I’m back.

[🕵🏽nftscamtracker👨🏽‍💻 @nftscamtracker]

🚨SCAM ALRET🚨

@DrallNFT is now @DrallCrypto

Would suggest to stay away from anything this scammer promotes

❌REPORT AND BLOCK❌

[🕵🏽nftscamtracker👨🏽‍💻 @nftscamtracker]

Let’s talked about @DrallNFT the scammer…

Spreading awareness before they drop their next scamcoin ($VIBE) was going to be $HYPE but that post was deleted.

Let’s start with why I was tracking this weasel in the first place.
🧵

[ZachXBT @zachxbt]

Does Spartans want to explain to the community why there was at least $25M of commingling between Blockdag & ZKP presale funds with Spartans KOL payment addresses onchain?

Gurhan Kiziloz projects continue to show red flags with deceptive marketing as the number of retail investor complaints on social media grows.

Source 1: https://t.co/tIhyRYWrPm

Source 2: https://t.co/4QzxzSuT57

Source 3: https://t.co/GVTf6fXpSQ

Source 4: https://t.co/Mgtd5xAlIU

[ZachXBT @zachxbt]

1/ An investigation into the opaque private loans/OTC, unilateral vesting changes, market maker coordination, unknown float, and >95% supply control behind $LAB's recent pump to $6B FDV.

Here's why @LABtrade_ represents everything wrong with the current meta of retail extraction on major centralized exchanges.

[ZachXBT @zachxbt]

@yelotree >meanwhile Yelo was just charged of laundering for threat actors via his Miami luxury car rental business and is facing up to 30 yrs

[ZachXBT @zachxbt]

1/ Meet Dritan Kapllani Jr, a US based threat actor tied to $19M from social engineering thefts targeting crypto holders.

Dritan flexes luxury cars, watches, private jets, & clubs all over social media.

Recently he was recorded on a call showing off a wallet with stolen funds.

[ZachXBT @zachxbt]

1/ The $150M+ DSJ Exchange (DSJEX) / BG Wealth Sharing Ponzi scheme collapsed last week. From April 27 – May 3, illicit actors laundered $92M+ across chains to obscure the trail.

I helped lead an initiative with @Tether_to, @Binance Security Team, @OKX, & US law enforcement that has since frozen $41.5M+.

[ZachXBT @zachxbt]

A summary of the RAVE -95% price fluctuation from $26 to $1 over the past 24 hours.

RAVE Timeline: April 18, 2026

7:26 am UTC: I posted a call to action for Binance, Bitget, & Gate to investigate RAVE market manipulation and offered a $10K bounty.

10:56 am UTC: I posted an update increasing the bounty to $25K.

11:18 am UTC: Bitget publicly acknowledged the call to action.

2:08 pm UTC: Binance publicly acknowledged the call to action.

3:06 pm UTC: RaveDAO posted claiming they have no involvement.

4:19 pm UTC: Gate publicly acknowledged the call to action.

In the days leading up, on April 13 & 14, I confronted RaveDAO co-founder Yemu Xu (wildwoomoo) but have yet to receive an answer.

RAVE launched in Dec 2025 on Binance Alpha with a 1B total supply. The addresses below, linked to the initial distribution, control ~95% of the RAVE supply (h/t Mlm):

0x9831156F1a6E506Fca41503590b42F07c2e80f54
0x8Ed6245C3276307E1A9D9Dc872E98A0E770070fd
0x6020656d1EF182173E45D4Fc375BDD5a48c674B0
0x2664cB80a5ee7D8EC05fe7C752dD62E078056E6d
0x2D81F8AeBf3e58A5e638006c9fd8F38C5220ecab
0x31694d761A8e851cFFbCd286aC54D01e5Ce5aFe6
0x0A1F07993a51CcEb4f52CA67765AECeADDA790d7
0xEB74Df8588cFC1C179Df4bd96C0bB8B227B9bE92
0x53d7d52301366DC14E1916b14eFeC1aDD8F3487b

I found suspicious CEX activity in April 2026 tied to RaveDAO team addresses onchain, which potentially contradicts their recent statement:
Bitget
0x2dc20f2180582172f5450c5d71e23fa438a7031b
0xa3a02aeb97fc1737c66f50d07d024799c137891d
0x2d95eb42525e6087e0cb7869f98da6838ed2e743
Gate
0x31711246b05d71e9eda5e38a3abb654020ee3353

Given the supply concentration, the team at minimum knows who is responsible for this price action.

A simple litmus test: $6B in market cap was wiped out on just $52M of 24hr liquidations (h/t CoinGlass). That ratio points to a manipulated and unsustainable valuation.

RAVE is not the only token with manipulation we have seen on major centralized exchanges. It's just the most blatant, reaching a top 15 market cap within 10 days before dropping 95% in hours.

Other projects with highly questionable price action recently include: SIREN, MYX, COAI, M, PIPPIN, RIVER.

Exchanges need faster intervention on manipulation. Detection at scale isn't easy, but each day of delay means retail traders absorb losses while platforms collect fees on the volume. The outcome is the same regardless of intent.

While it's good the exchanges responded, I find it unlikely this activity wasn't spotted internally before I raised it publicly.

I recognize how much this behavior takes from retail traders, and I plan to investigate similar movements in hopes of identifying the responsible parties.

I want to reiterate that I did not take a position. If I had, I would have been liquidated myself. I also could not anticipate if or when the exchanges would comment publicly.

My $25K bounty will remain active since the only DMs received were unverified claims rather than non-public information with supporting evidence as requested.

[ZachXBT @zachxbt]

1/ Recently an unnamed source shared data exfiltrated from an internal North Korean payment server containing 390 accounts, chat logs, crypto transactions.

I spent long hours going through all of it, none of which has ever been publicly released.

It revealed an intricate ~$1M/month scheme of fraudulent identities, forged legal documents, and crypto-to-fiat conversion.

Enjoy the findings!

[ZachXBT @zachxbt]

1/ Meet @WheresBroox (Broox Bauer), one of the multiple @AxiomExchange employees allegedly abusing the lack of access controls for internal tools to lookup sensitive user details to insider trade by tracking private wallet activity since early 2025.

[ZachXBT @zachxbt]

1/ Meet the threat actor John (Lick), who was caught flexing $23M in a wallet address directly tied to $90M+ in suspected thefts from the US Government in 2024 and multiple other unidentified victims from Nov 2025 to Dec 2025.

[ZachXBT @zachxbt]

Community alert: Ledger had another data breach via payment processor Global-e leaking the personal data of customers (name & other contact information).

Earlier today customers received the email below.

[ZachXBT @zachxbt]

1/ Meet Haby (Havard), a Canadian threat actor who has stolen $2M+ via Coinbase support impersonation social engineering scams in the past year blowing the funds on rare social media usernames, bottle service, & gambling.

[🕵🏽nftscamtracker👨🏽‍💻 @nftscamtracker]

@coffeebreak_YT

[ZachXBT @zachxbt]

I am pleased to share that the threat actor ‘Ronald Spektor’ (Ron) was recently arrested in New York.

In November 2024 I published my investigation detailing his involvement in a $6M Coinbase support impersonation scam and other thefts after a victim contacted me for assistance.

[ZachXBT @zachxbt]

1/2 In June 2024 a victim was brutally robbed for $4.3M+ of crypto assets at gunpoint via home invasion in the UK after the attackers posed as delivery drivers.

I am proud to share that Faris & his two other accomplices were just sentenced and nearly the full amount of stolen funds was seized by MET Police.

I previously published my investigation identifying Faris and worked closely with the victim to communicate all findings to law enforcement.

Due to minor protection laws certain details about the case remain sealed.

Court: Sheffield Crown Court
Case reference number: 01GD1223024

[🕵🏽nftscamtracker👨🏽‍💻 @nftscamtracker]

👀

[SomaXBT @somaxbt]

What happened to the $6.4 million pre-sale fund raised by @PikeFinance!

Back in March 2024, Pike finance raised $6.4 million by the public, but they added only $8k in liquidity to their recent token launch What happened to the remaining million dollers?
- Founder @terrycflam cashed $1.56 million using new coinbase wallet
- cashed out another $2.1 million using binance from their multiple safe wallets
- lost $1.6 million from the exploit due to the storage misalignment
Currently, the total of $5.26 million went out of their wallets. remaining funds staying on their multiple safe wallets and $600k on aave base

[ZachXBT @zachxbt]

NEW LEAK: Price sheet of 200+ crypto influencers and their wallet addresses from a project they were recently contacted by to promote.

From 160+ accounts who accepted the deal I only saw <5 accounts actually disclose the promotional posts as an advertisement.

[ZachXBT @zachxbt]

@web3 Community alert: @web3 is linked to a team member of the Squiggles NFT rug and Raichu who I previously post about

[Rep. Jim McGovern @RepMcGovern]

They picked Les Mis—a musical about standing up to tyranny.

They protested you at your own event and you were too stupid to get it.

[ZachXBT @zachxbt]

A few hours ago it was announced that $31M from the Uranium Finance exploit was seized by US law enforcement.

In Dec 2023 I posted an investigation for the $50m Uranium exploit on BSC detailing how the exploiter had laundered $10.5M via Magic The Gathering trading cards using a broker and shared my Tornado Cash demix for 11.2K ETH from the attack.

[Dave Portnoy @stoolpresidente]

*update.

Just launched Greed 2. Don’t invest in this collectible coin with more than you can afford to lose. It’ll be volatile. I will not sell 1 penny till at least midnight est or maybe never. Be careful.

GoL6RVGQFzTD7MdoNEHUQmNp6SgXBn6f9khxAW5Bpump